CVE-2012-2768 Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrar...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/request-tracker4(Debian:12) | < 4.0.6-1 | 4.0.6-1 |
| best practical solutions request tracker | = 2.0.4 | No fix listed |
| best practical solutions request tracker | = 2.0.5 | No fix listed |
| best practical solutions request tracker | = 2.0.6 | No fix listed |
| best practical solutions request tracker | = 2.0.7 | No fix listed |
| best practical solutions request tracker | = 2.0.8 | No fix listed |
| best practical solutions request tracker | = 2.0.9 | No fix listed |
| best practical solutions request tracker | = 2.0.11 | No fix listed |
| best practical solutions request tracker | = 2.0.12 | No fix listed |
| best practical solutions request tracker | = 2.0.13 | No fix listed |
| best practical solutions request tracker | = 2.0.14 | No fix listed |
| best practical solutions request tracker | = 2.0.15 | No fix listed |
| best practical solutions request tracker | = 2.4.3 | No fix listed |
References
- Debian Security Tracker CVE-2012-2768 vendor-advisory
- [rt-announce] 20120725 Security vulnerabilities in three commonly deployed RT extensions mailing-list patch vendor-advisory
- 50024 third-party-advisory vendor-advisory
- 50440 third-party-advisory
- 54689 vdb-entry
- rtfm-unspec-xss(77212) vdb-entry