tocsin

Debian/request-tracker5: unknown

The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which displays invitation data without HTML sanitization. XSS vulnerability allows an a

Action: Upgrade request-tracker5 to 5.0.7+dfsg-4+deb13u1 or later.

Affected

introducedfixedlast affected
05.0.7+dfsg-4+deb13u1-

Fixed versions

5.0.7+dfsg-4+deb13u1

Sources

published · modified · JSON