tocsin

Debian/request-tracker4: unknown

Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2)

Action: Upgrade request-tracker4 to 4.2.11-2 or later.

Affected

introducedfixedlast affected
04.2.11-2-

Fixed versions

4.2.11-2

Sources

published · modified · JSON