Best Practical Solutions RT Custom字段跨站脚本攻击漏洞

漏洞信息详情

Best Practical Solutions RT 3.6.9之前的3.6.x版本，3.8.5之前的3.8.x版本和其他的3.4.6到3.8.4版本中存在跨站脚本攻击漏洞。远程攻击者可以借助特定的Custom字段，注入任意的web脚本或HTML。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

http://sunsolve.sun.com/search/document.do?assetkey=1-66-270475-1

来源: MLIST

名称: [rt-announce] 20090914 RT 3.8.5 Released

链接:http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000173.html

来源: MLIST

名称: [rt-announce] 20090914 RT 3.6.9 Released

链接:http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000172.html

来源: MLIST

名称: [oss-security] 20091116 Re: CVE Id request: request-tracker

链接:http://www.openwall.com/lists/oss-security/2009/11/16/4

来源: MLIST

名称: [oss-security] 20091115 CVE Id request: request-tracker

链接:http://www.openwall.com/lists/oss-security/2009/11/15/1

来源: bugs.debian.org

链接:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546778

暂无