request-tracker4 vulnerabilities (Ubuntu)
38 vulnerabilities.
-
request-tracker4Ubuntu CKEditor: Cross-site scripting (XSS) in the engine package 8.1 High -
request-tracker4Ubuntu CKEditor: Cross-site scripting (XSS) in the engine package 3.1 Low -
request-tracker4Ubuntu RT: LDAP authentication bypass via empty password 8.1 High -
request-tracker4Ubuntu RT: SQL injection via entry_aggregator parameter in JSON search 8.8 High -
request-tracker4Ubuntu RT has broken CSRF protection for authenticated users 7.1 High -
request-tracker4Ubuntu RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps 4.6 Medium -
request-tracker4Ubuntu Reflected XSS in Request Tracker 5.1 Medium -
request-tracker4Ubuntu RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint 9.1 Critical -
request-tracker4Ubuntu RT: Cross-Site Scripting via inline-served uploaded content 5.4 Medium -
request-tracker4Ubuntu RT: Reflected Cross-Site Scripting via URL parameters 6.1 Medium -
request-tracker4Ubuntu CKEditor: Cross-site scripting (XSS) in the HTML Support package 6.4 Medium -
request-tracker4Ubuntu A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows... 5.4 Medium -
request-tracker4Ubuntu Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via... 2.6 Low -
request-tracker4Ubuntu Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via... 7.2 High -
request-tracker4Ubuntu Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME 2.3 Low -
request-tracker4Ubuntu Cross-site scripting (XSS) in the real-time collaboration package 2.3 Low -
request-tracker4Ubuntu CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package 5.1 Medium -
request-tracker4Ubuntu CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover 3.1 Low -
request-tracker4Ubuntu Information exposure vulnerability in Request Tracker (RT) 5.5 Medium -
request-tracker4Ubuntu Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature 6.1 Medium -
request-tracker4Ubuntu CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection 6.1 Medium -
request-tracker4Ubuntu Cross-Site Scripting vulnerability in CKSource CKEditor 6.1 Medium -
request-tracker4Ubuntu Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure... 7.5 High -
request-tracker4Ubuntu Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information... 7.5 High -
request-tracker4Ubuntu ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process 4.7 Medium -
request-tracker4Ubuntu org.xwiki.contrib:application-ckeditor-ui vulnerable to Remote Code Execution via Cross-Site Request Forgery 9.1 Critical -
request-tracker4Ubuntu Cross-site scripting caused by the editor instance destroying process in ckeditor5 5.8 Medium -
request-tracker4Ubuntu Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted... 6.1 Medium -
request-tracker4Ubuntu Regular expression Denial of Service in dialog plugin 6.5 Medium -
request-tracker4Ubuntu Cross-site Scripting in CKEditor4 5.4 Medium -
request-tracker4Ubuntu HTML comments vulnerability allowing to execute JavaScript code 8.2 High -
request-tracker4Ubuntu Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML 8.2 High -
request-tracker4Ubuntu Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2... 7.5 High -
request-tracker4Ubuntu Execution of JavaScript code using malformed HTML in ckeditor 7.3 High -
request-tracker4Ubuntu The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2... 8.8 High -
request-tracker4Ubuntu Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote... 8.8 High -
request-tracker4Ubuntu Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use... 5.9 Medium -
request-tracker4Ubuntu Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before... 6.1 Medium