CVE-2011-2083: XSS
Published Jun 4, 2012
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
170 affected components
bestpractical RT=3.8.7
bestpractical RT=3.5.5
bestpractical RT=3.0.4
bestpractical RT=3.2.1-rc1
bestpractical RT=3.6.0-pre1
bestpractical RT=3.8.9-rc2
bestpractical RT=3.4.0-rc2
bestpractical RT=3.0.8
bestpractical RT=3.8.11
bestpractical RT=3.4.2-rc2
bestpractical RT=3.6.4-rc2
bestpractical RT=3.8.8-rc2
bestpractical RT=3.2.1-rc3
bestpractical RT=3.8.9-rc1
bestpractical RT=3.2.0-rc4
bestpractical RT=3.1.2
bestpractical RT=3.4.2-rc1
bestpractical RT=3.6.6-rc1
bestpractical RT=3.4.5
bestpractical RT=3.0.2
bestpractical RT=3.5.4
bestpractical RT=3.6.7
bestpractical RT=3.0.10-rc1
bestpractical RT=3.6.2
bestpractical RT=3.4.5-rc2
bestpractical RT=3.2.2
bestpractical RT=3.6.3
bestpractical RT=3.1.6
bestpractical RT=3.0.11
bestpractical RT=3.8.2
bestpractical RT=3.8.8-rc4
bestpractical RT=3.6.2-rc1
bestpractical RT=3.1.11
bestpractical RT=3.6.0-pre0
bestpractical RT=3.1.10
bestpractical RT=3.0.10-pre2
bestpractical RT=3.6.5-rc1
bestpractical RT=3.6.0
bestpractical RT=3.6.6-rc2
bestpractical RT=3.8.0
bestpractical RT=3.4.0-rc5
bestpractical RT=3.4.0
bestpractical RT=3.6.3-rc4
bestpractical RT=3.8.1-rc1
bestpractical RT=3.8.10
bestpractical RT=3.1.7
bestpractical RT=3.4.4-pre2
bestpractical RT=3.8.3-rc1
bestpractical RT=3.8.9
bestpractical RT=3.1.13
bestpractical RT=3.4.7-rc1
bestpractical RT=3.4.0-rc3
bestpractical RT=3.6.5-rc2
bestpractical RT=3.8.2-rc2
bestpractical RT=3.8.0-rc1
bestpractical RT=3.4.0-rc4
bestpractical RT=3.0.10
bestpractical RT=3.8.8-rc3
bestpractical RT=3.8.2-rc1
bestpractical RT=3.6.10
bestpractical RT=3.0.10-pre1
bestpractical RT=3.1.16
bestpractical RT=3.2.3
bestpractical RT=3.2.2-rc1
bestpractical RT=3.6.3-rc2
bestpractical RT=3.5.3
bestpractical RT=3.0.5
bestpractical RT=3.2.0
bestpractical RT=3.8.9-rc3
bestpractical RT=3.0.0
bestpractical RT=3.4.6
bestpractical RT=3.0.3
bestpractical RT=3.4.3
bestpractical RT=3.6.9
bestpractical RT=3.6.6
bestpractical RT=3.6.1-rc2
bestpractical RT=3.6.5
bestpractical RT=3.8.1-rc3
bestpractical RT=3.4.3-rc2
bestpractical RT=3.4.0-rc6
bestpractical RT=3.6.2-rc3
bestpractical RT=3.4.5-pre1
bestpractical RT=3.8.4-rc1
bestpractical RT=3.0.1
bestpractical RT=3.8.1-rc4
bestpractical RT=3.4.4-pre3
bestpractical RT=3.2.1
bestpractical RT=3.8.5
bestpractical RT=3.6.6-rc3
bestpractical RT=3.2.3-rc2
bestpractical RT=3.4.4
bestpractical RT=3.0.11-rc4
bestpractical RT=3.5.6
bestpractical RT=3.6.4-rc1
bestpractical RT=3.6.8
bestpractical RT=3.0.6
bestpractical RT=3.2.1-rc2
bestpractical RT=3.8.1-rc5
bestpractical RT=3.1.8
bestpractical RT=3.4.6-rc2
bestpractical RT=3.4.3-rc1
bestpractical RT=3.6.3-rc1
bestpractical RT=3.6.0-rc1
bestpractical RT=3.8.6-rc1
bestpractical RT=3.2.0-rc2
bestpractical RT=3.1.12
bestpractical RT=3.1.5
bestpractical RT=3.8.8
bestpractical RT=3.8.0-rc3
bestpractical RT=3.8.0-rc2
bestpractical RT=3.2.0-rc1
bestpractical RT=3.1.17
bestpractical RT=3.0.7
bestpractical RT=3.2.0-rc3
bestpractical RT=3.7.86
bestpractical RT=3.0.7.1
bestpractical RT=3.6.3-rc3
bestpractical RT=3.7.80
bestpractical RT=3.1.15
bestpractical RT=3.0.12
bestpractical RT=3.6.2-rc4
bestpractical RT=3.0.9
bestpractical RT=3.4.4-pre1
bestpractical RT=3.8.3
bestpractical RT=3.7.1
bestpractical RT=3.1.3
bestpractical RT=3.6.1
bestpractical RT=3.4.0-rc1
bestpractical RT=3.4.1
bestpractical RT=3.4.5-rc1
bestpractical RT=3.2.3-rc1
bestpractical RT=3.8.6
bestpractical RT=3.6.4
bestpractical RT=3.5.7
bestpractical RT=3.6.0-rc3
bestpractical RT=3.8.1
bestpractical RT=3.8.4
bestpractical RT=3.7.5
bestpractical RT=3.8.1-rc2
bestpractical RT=3.7.85
bestpractical RT=3.6.1-rc1
bestpractical RT=3.8.3-rc2
bestpractical RT=3.6.2-rc5
bestpractical RT=3.4.6-rc1
bestpractical RT=3.6.1-pre2
bestpractical RT=3.0.11-rc2
bestpractical RT=3.2.1-rc4
bestpractical RT=3.5.2
bestpractical RT=3.6.0-rc2
bestpractical RT=3.1.4
bestpractical RT=3.0.11-rc3
bestpractical RT=3.8.7-rc1
bestpractical RT=3.1.14
bestpractical RT=3.4.2
bestpractical RT=3.5.1
bestpractical RT=4.0.0-rc4
bestpractical RT=4.0.3
bestpractical RT=4.0.0-rc7
bestpractical RT=4.0.1
bestpractical RT=4.0.0-rc3
bestpractical RT=4.0.0-rc8
bestpractical RT=4.0.0-rc6
bestpractical RT=4.0.0-rc5
bestpractical RT=4.0.4
bestpractical RT=4.0.0-rc2
bestpractical RT=4.0.0
bestpractical RT=3.8.12
bestpractical RT=4.0.2
bestpractical RT=4.0.0-rc1
bestpractical RT=4.0.5
Remediation
Event History
Jun 4, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2083?
The severity of CVE-2011-2083 ranges from moderate to high based on the potential impact of cross-site scripting attacks.
2
How do I fix CVE-2011-2083?
To fix CVE-2011-2083, upgrade to Best Practical Solutions RT version 3.8.12 or 4.0.6 or later.
3
What versions of RT are affected by CVE-2011-2083?
CVE-2011-2083 affects Best Practical Solutions RT versions before 3.8.12 and 4.x before 4.0.6.
4
What type of vulnerability is CVE-2011-2083?
CVE-2011-2083 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.
5
Who is responsible for CVE-2011-2083?
CVE-2011-2083 was discovered and disclosed by the security team at Best Practical Solutions.