Cross-Site Scripting Vulnerability in Request Tracker's MobileUI Extension
CVE-2013-3736

Currently unrated

Key Information:

Vendor: Bestpractical
Status: Rt-extension-mobileui; Request Tracker
Vendor: CVE Published:; 5 May 2014

🔔 Create Bestpractical Vulnerability Alert

What is CVE-2013-3736?

A cross-site scripting (XSS) vulnerability exists in the MobileUI extension for Request Tracker, allowing remote attackers to inject arbitrary web scripts or HTML if they can manipulate the name of an attached file. This could potentially lead to malicious actions performed under the context of the user's session.

References

http://lists.bestpractical.com/pipermail/rt-announce/2013...

mailing-listx_refsource_MLIST

https://exchange.xforce.ibmcloud.com/vulnerabilities/84963

vdb-entryx_refsource_XF

http://osvdb.org/94281

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 5, 2014
Vulnerability Reserved
May 31, 2013

CVE-2013-3736 Data

JSON