CVE-2009-3892: XSS
Published Nov 17, 2009
·Updated
Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields.
Affected Software
15 affected components
bestpractical RT=3.6.7
bestpractical RT=3.6.2
bestpractical RT=3.6.3
bestpractical RT=3.8.2
bestpractical RT=3.6.0
bestpractical RT=3.8.0
bestpractical RT=3.4.6
bestpractical RT=3.6.6
bestpractical RT=3.6.5
bestpractical RT=3.6.8
bestpractical RT=3.8.3
bestpractical RT=3.6.1
bestpractical RT=3.6.4
bestpractical RT=3.8.1
bestpractical RT=3.8.4
Remediation
Event History
Nov 17, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3892?
CVE-2009-3892 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2009-3892?
To fix CVE-2009-3892, upgrade to Best Practical Solutions RT version 3.6.9 or 3.8.5 or later.
3
Which versions are affected by CVE-2009-3892?
CVE-2009-3892 affects Best Practical Solutions RT versions 3.4.6 to 3.8.4 and versions 3.6.x before 3.6.9 and 3.8.x before 3.8.5.
4
What kind of attacks can CVE-2009-3892 be used for?
CVE-2009-3892 can be exploited to perform cross-site scripting attacks allowing attackers to inject arbitrary web scripts or HTML.
5
When was CVE-2009-3892 disclosed?
CVE-2009-3892 was publicly disclosed in September 2009.