CVE-2013-5587

Severity Score

2.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions.

Vulnerabilidad Cross-site scripting (XSS) en Request Tracker (RT) v4.x anterior a v4.0.13, cuando se configura MakeClicky, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través una URL en un ticket. NOTA: este problema se ha dividido desde CVE-2013-3371 debido a las diferentes versiones afectadas.

*Credits: N/A

CVSS Scores

NISTv2 2.6

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-08-23 CVE Reserved
2013-08-23 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (6)

URL	Tag	Source
http://secunia.com/advisories/53505	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html	2013-08-26
http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html	2013-08-26
http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html	2013-08-26

URL	Date	SRC
http://secunia.com/advisories/53522	2013-08-26
http://www.debian.org/security/2012/dsa-2670	2013-08-26

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		rc1		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		rc2		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		rc3		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		rc4		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		rc5		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		rc6		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		rc7		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.0 Search vendor "Bestpractical" for product "Rt" and version "4.0.0"		rc8		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.1 Search vendor "Bestpractical" for product "Rt" and version "4.0.1"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.1 Search vendor "Bestpractical" for product "Rt" and version "4.0.1"		rc1		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.1 Search vendor "Bestpractical" for product "Rt" and version "4.0.1"		rc2		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.2 Search vendor "Bestpractical" for product "Rt" and version "4.0.2"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.2 Search vendor "Bestpractical" for product "Rt" and version "4.0.2"		rc1		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.2 Search vendor "Bestpractical" for product "Rt" and version "4.0.2"		rc2		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.3 Search vendor "Bestpractical" for product "Rt" and version "4.0.3"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.3 Search vendor "Bestpractical" for product "Rt" and version "4.0.3"		rc1		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.3 Search vendor "Bestpractical" for product "Rt" and version "4.0.3"		rc2		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.4 Search vendor "Bestpractical" for product "Rt" and version "4.0.4"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.5 Search vendor "Bestpractical" for product "Rt" and version "4.0.5"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.5 Search vendor "Bestpractical" for product "Rt" and version "4.0.5"		rc1		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.6 Search vendor "Bestpractical" for product "Rt" and version "4.0.6"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.7 Search vendor "Bestpractical" for product "Rt" and version "4.0.7"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.7 Search vendor "Bestpractical" for product "Rt" and version "4.0.7"		rc1		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.8 Search vendor "Bestpractical" for product "Rt" and version "4.0.8"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.8 Search vendor "Bestpractical" for product "Rt" and version "4.0.8"		rc1		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.8 Search vendor "Bestpractical" for product "Rt" and version "4.0.8"		rc2		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.9 Search vendor "Bestpractical" for product "Rt" and version "4.0.9"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.10 Search vendor "Bestpractical" for product "Rt" and version "4.0.10"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.11 Search vendor "Bestpractical" for product "Rt" and version "4.0.11"		-		Affected
Bestpractical Search vendor "Bestpractical"		Rt Search vendor "Bestpractical" for product "Rt"				4.0.12 Search vendor "Bestpractical" for product "Rt" and version "4.0.12"		-		Affected