CVE-2013-3371

Published: Aug 23, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.

Affected (77)

Products: Bestpractical: Rt

Bestpractical

1 product

Configuration A

46 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Rt	Version 3.8.0
Bestpractical Rt	Version 3.8.0 preflight1
Bestpractical Rt	Version 3.8.0 rc1
Bestpractical Rt	Version 3.8.0 rc2
Bestpractical Rt	Version 3.8.0 rc3
Bestpractical Rt	Version 3.8.10
Bestpractical Rt	Version 3.8.10 rc1
Bestpractical Rt	Version 3.8.11
Bestpractical Rt	Version 3.8.11 rc1
Bestpractical Rt	Version 3.8.11 rc2
Bestpractical Rt	Version 3.8.12
Bestpractical Rt	Version 3.8.13
Bestpractical Rt	Version 3.8.13 rc1
Bestpractical Rt	Version 3.8.13 rc2
Bestpractical Rt	Version 3.8.14
Bestpractical Rt	Version 3.8.14 rc1
Bestpractical Rt	Version 3.8.15
Bestpractical Rt	Version 3.8.16
Bestpractical Rt	Version 3.8.1
Bestpractical Rt	Version 3.8.1 preflight0
Bestpractical Rt	Version 3.8.1 rc1
Bestpractical Rt	Version 3.8.1 rc2
Bestpractical Rt	Version 3.8.1 rc3
Bestpractical Rt	Version 3.8.1 rc4
Bestpractical Rt	Version 3.8.1 rc5
Bestpractical Rt	Version 3.8.2
Bestpractical Rt	Version 3.8.2 rc1
Bestpractical Rt	Version 3.8.2 rc2
Bestpractical Rt	Version 3.8.3
Bestpractical Rt	Version 3.8.3 rc1
Bestpractical Rt	Version 3.8.3 rc2
Bestpractical Rt	Version 3.8.4
Bestpractical Rt	Version 3.8.4 rc1
Bestpractical Rt	Version 3.8.5
Bestpractical Rt	Version 3.8.6
Bestpractical Rt	Version 3.8.6 rc1
Bestpractical Rt	Version 3.8.7
Bestpractical Rt	Version 3.8.7 rc1
Bestpractical Rt	Version 3.8.8
Bestpractical Rt	Version 3.8.8 rc2
Bestpractical Rt	Version 3.8.8 rc3
Bestpractical Rt	Version 3.8.8 rc4
Bestpractical Rt	Version 3.8.9
Bestpractical Rt	Version 3.8.9 rc1
Bestpractical Rt	Version 3.8.9 rc2
Bestpractical Rt	Version 3.8.9 rc3

Configuration B

31 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Rt	Version 4.0.0
Bestpractical Rt	Version 4.0.0 rc1
Bestpractical Rt	Version 4.0.0 rc2
Bestpractical Rt	Version 4.0.0 rc3
Bestpractical Rt	Version 4.0.0 rc4
Bestpractical Rt	Version 4.0.0 rc5
Bestpractical Rt	Version 4.0.0 rc6
Bestpractical Rt	Version 4.0.0 rc7
Bestpractical Rt	Version 4.0.0 rc8
Bestpractical Rt	Version 4.0.10
Bestpractical Rt	Version 4.0.11
Bestpractical Rt	Version 4.0.12
Bestpractical Rt	Version 4.0.1
Bestpractical Rt	Version 4.0.1 rc1
Bestpractical Rt	Version 4.0.1 rc2
Bestpractical Rt	Version 4.0.2
Bestpractical Rt	Version 4.0.2 rc1
Bestpractical Rt	Version 4.0.2 rc2
Bestpractical Rt	Version 4.0.3
Bestpractical Rt	Version 4.0.3 rc1
Bestpractical Rt	Version 4.0.3 rc2
Bestpractical Rt	Version 4.0.4
Bestpractical Rt	Version 4.0.5
Bestpractical Rt	Version 4.0.5 rc1
Bestpractical Rt	Version 4.0.6
Bestpractical Rt	Version 4.0.7
Bestpractical Rt	Version 4.0.7 rc1
Bestpractical Rt	Version 4.0.8
Bestpractical Rt	Version 4.0.8 rc1
Bestpractical Rt	Version 4.0.8 rc2
Bestpractical Rt	Version 4.0.9