CVE-2012-2768: XSS
First published: Wed Aug 15 2012(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Request Tracker | =2.0.4 | |
| Request Tracker | =2.0.5 | |
| Request Tracker | =2.0.6 | |
| Request Tracker | =2.0.7 | |
| Request Tracker | =2.0.8 | |
| Request Tracker | =2.0.9 | |
| Request Tracker | =2.0.11 | |
| Request Tracker | =2.0.12 | |
| Request Tracker | =2.0.13 | |
| Request Tracker | =2.0.14 | |
| Request Tracker | =2.0.15 | |
| Request Tracker | =2.4.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-2768?
CVE-2012-2768 is considered a medium severity vulnerability due to the potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2012-2768?
To fix CVE-2012-2768, upgrade the RTFM extension to version 2.4.4 or later, as it contains the necessary patches for this vulnerability.
What software is affected by CVE-2012-2768?
CVE-2012-2768 affects RTFM extension versions 2.0.4 through 2.4.3 for Best Practical Solutions Request Tracker.
Can CVE-2012-2768 be exploited remotely?
Yes, CVE-2012-2768 can be exploited remotely, allowing attackers to inject arbitrary web scripts or HTML.
What are the potential impacts of CVE-2012-2768?
The potential impacts of CVE-2012-2768 include unauthorized access to user sessions, data theft, or defacement of web pages.
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/event
- agent/remedy
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- vendor/best practical solutions
- canonical/request tracker
- version/request tracker/2.0.4
- version/request tracker/2.0.5
- version/request tracker/2.0.6
- version/request tracker/2.0.7
- version/request tracker/2.0.8
- version/request tracker/2.0.9
- version/request tracker/2.0.11
- version/request tracker/2.0.12
- version/request tracker/2.0.13
- version/request tracker/2.0.14
- version/request tracker/2.0.15
- version/request tracker/2.4.3