CVE-2013-5587

Published: Aug 23, 2013Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions.

Affected (31)

Products: Bestpractical: Rt

Bestpractical

1 product

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Rt	Version 4.0.0
Bestpractical Rt	Version 4.0.0 rc1
Bestpractical Rt	Version 4.0.0 rc2
Bestpractical Rt	Version 4.0.0 rc3
Bestpractical Rt	Version 4.0.0 rc4
Bestpractical Rt	Version 4.0.0 rc5
Bestpractical Rt	Version 4.0.0 rc6
Bestpractical Rt	Version 4.0.0 rc7
Bestpractical Rt	Version 4.0.0 rc8
Bestpractical Rt	Version 4.0.10
Bestpractical Rt	Version 4.0.11
Bestpractical Rt	Version 4.0.12
Bestpractical Rt	Version 4.0.1
Bestpractical Rt	Version 4.0.1 rc1
Bestpractical Rt	Version 4.0.1 rc2
Bestpractical Rt	Version 4.0.2
Bestpractical Rt	Version 4.0.2 rc1
Bestpractical Rt	Version 4.0.2 rc2
Bestpractical Rt	Version 4.0.3
Bestpractical Rt	Version 4.0.3 rc1
Bestpractical Rt	Version 4.0.3 rc2
Bestpractical Rt	Version 4.0.4
Bestpractical Rt	Version 4.0.5
Bestpractical Rt	Version 4.0.5 rc1
Bestpractical Rt	Version 4.0.6
Bestpractical Rt	Version 4.0.7
Bestpractical Rt	Version 4.0.7 rc1
Bestpractical Rt	Version 4.0.8
Bestpractical Rt	Version 4.0.8 rc1
Bestpractical Rt	Version 4.0.8 rc2
Bestpractical Rt	Version 4.0.9