Cross site scripting

2014-05-0517:06:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file.

CPENameOperatorVersion
request_trackereq4.0.0
request_trackereq4.0.6
request_trackereq4.0.7
request_trackereq4.0.5
request_trackereq4.0.1
request_trackereq4.0.2
request_trackereq4.0.10
request_trackereq4.0.9
request_trackereq4.0.4
request_trackereq4.0.11

Name	Operator	Version
request_tracker	eq	4.0.0
request_tracker	eq	4.0.6
request_tracker	eq	4.0.7
request_tracker	eq	4.0.5
request_tracker	eq	4.0.1
request_tracker	eq	4.0.2
request_tracker	eq	4.0.10
request_tracker	eq	4.0.9
request_tracker	eq	4.0.4
request_tracker	eq	4.0.11