Unscored CVE-2013-3736 EUVD-2013-3669GHSA-w3v3-wvmj-3f87

Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 be…

Published May 5, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file.

References

[rt-announce] 20130612 Security vulnerability in RT::Extension::MobileUI mailing-list
rtextensionmobileui-cve20133736-xss(84963) vdb-entry
94281 vdb-entry
53799 third-party-advisory