CVE-2015-5475

Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights management pages.
Configurations

Configuration 1 (hide)

cpe:2.3:a:bestpractical:request_tracker:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-08-14 18:59

Updated : 2024-02-04 18:53


NVD link : CVE-2015-5475

Mitre link : CVE-2015-5475

CVE.ORG link : CVE-2015-5475


JSON object : View

Products Affected

bestpractical

  • request_tracker
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')