CVE-2012-2768

Опубликовано: 15 авг. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html
Patch
Vendor Advisory
http://secunia.com/advisories/50024
Vendor Advisory
http://secunia.com/advisories/50440
http://www.securityfocus.com/bid/54689
https://exchange.xforce.ibmcloud.com/vulnerabilities/77212
http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html
Patch
Vendor Advisory
http://secunia.com/advisories/50024
Vendor Advisory
http://secunia.com/advisories/50440
http://www.securityfocus.com/bid/54689
https://exchange.xforce.ibmcloud.com/vulnerabilities/77212

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.0.15:*:*:*:*:*:*:*

cpe:2.3:a:best_practical_solutions:request_tracker:2.4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00357

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2012-2768

ubuntu

почти 13 лет назад

CVE-2012-2768

debian

почти 13 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the topic admin ...

GHSA-266j-ggfg-wh9m

github

около 3 лет назад

BDU:2015-01313

fstec

почти 13 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации

EPSS

Процентиль: 57%

0.00357

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79