CVE-2013-3371

EPSS 0.44%

發布日:2013/8/23修改日:2026/4/28

也稱為:DEBIAN-CVE-2013-3371

描述

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.

受影響套件(1)

Debian/request-tracker4from 0, < 4.0.12-2

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2013-3371