CVE-2003-0273: XSS

Published May 9, 2003

Updated

Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies.

Affected Software

8 affected components

Best Practical Solutions Request Tracker=1.0.3

Best Practical Solutions Request Tracker=1.0.5

Best Practical Solutions Request Tracker=1.0.0

Best Practical Solutions Request Tracker=1.0.4

Best Practical Solutions Request Tracker=1.0.2

Best Practical Solutions Request Tracker=1.0.6

Best Practical Solutions Request Tracker=1.0.1

Best Practical Solutions Request Tracker=1.0.7

Event History

May 9, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

May 27, 2003

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0273?

CVE-2003-0273 has a moderate severity rating due to its potential for exploitation via cross-site scripting.

How do I fix CVE-2003-0273?

To fix CVE-2003-0273, upgrade Request Tracker to version 1.0.8 or later, which contains a patch for this vulnerability.

Who is affected by CVE-2003-0273?

CVE-2003-0273 affects users of Request Tracker versions 1.0.0 through 1.0.7.

What impact does CVE-2003-0273 have on users?

CVE-2003-0273 allows remote attackers to execute arbitrary scripts in the context of the user's browser, potentially leading to stolen credentials or session hijacking.

Is CVE-2003-0273 easy to exploit?

Yes, CVE-2003-0273 is considered relatively easy to exploit due to its nature as a cross-site scripting vulnerability.