request-tracker4 vulnerabilities (Debian)
50 vulnerabilities.
-
request-tracker4Debian RT: LDAP authentication bypass via empty password 8.1 High -
request-tracker4Debian RT: SQL injection via entry_aggregator parameter in JSON search 8.8 High -
request-tracker4Debian RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps 4.6 Medium -
request-tracker4Debian Reflected XSS in Request Tracker 5.1 Medium -
request-tracker4Debian RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint 9.1 Critical -
request-tracker4Debian RT: Cross-Site Scripting via inline-served uploaded content 5.4 Medium -
request-tracker4Debian Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via... 2.6 Low -
request-tracker4Debian Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via... 7.2 High -
request-tracker4Debian Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME 2.3 Low -
request-tracker4Debian Information exposure vulnerability in Request Tracker (RT) 5.5 Medium -
request-tracker4Debian Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure... 7.5 High -
request-tracker4Debian Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information... 7.5 High -
request-tracker4Debian Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted... 6.1 Medium -
request-tracker4Debian Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2... 7.5 High -
request-tracker4Debian The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2... 8.8 High -
request-tracker4Debian Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote... 8.8 High -
request-tracker4Debian Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use... 5.9 Medium -
request-tracker4Debian Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before... 6.1 Medium -
request-tracker4Debian Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT)... 4.3 Medium -
request-tracker4Debian Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12... 4.3 Medium -
request-tracker4Debian RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack... 6.4 Medium -
request-tracker4Debian RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote... 5.0 Medium -
request-tracker4Debian The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4... 7.1 High -
request-tracker4Debian Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when... 2.6 Low -
request-tracker4Debian Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13,... 4.3 Medium -
request-tracker4Debian CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13... 5.0 Medium -
request-tracker4Debian Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to... 4.3 Medium -
request-tracker4Debian Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x... 4.3 Medium -
request-tracker4Debian Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict... 6.8 Medium -
request-tracker4Debian Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated... 6.0 Medium -
request-tracker4Debian bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to... 3.3 Low -
request-tracker4Debian Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom... 6.0 Medium -
request-tracker4Debian Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... 4.3 Medium -
request-tracker4Debian Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... 4.3 Medium -
request-tracker4Debian Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... 6.4 Medium -
request-tracker4Debian Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled... 4.3 Medium -
request-tracker4Debian Argument injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0... 5.0 Medium -
request-tracker4Debian Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to... 5.0 Medium -
request-tracker4Debian Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions... 6.8 Medium -
request-tracker4Debian FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which... 4.0 Medium -
request-tracker4Debian Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users... 3.5 Low -
request-tracker4Debian Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the... 4.3 Medium -
request-tracker4Debian Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM... 4.3 Medium -
request-tracker4Debian SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x... 6.5 Medium -
request-tracker4Debian Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable... 3.5 Low -
request-tracker4Debian Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the... 6.8 Medium -
request-tracker4Debian Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before... 6.8 Medium -
request-tracker4Debian Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated... 4.0 Medium -
request-tracker4Debian Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8... 4.3 Medium -
request-tracker4Debian The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4... 5.0 Medium