Ubuntu.comUB:CVE-2015-5475

HistoryAug 14, 2015 - 12:00 a.m.

CVE-2015-5475

2015-08-1400:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT)
4.x before 4.2.12 allow remote attackers to inject arbitrary web script or
HTML via vectors related to the (1) user and (2) group rights management
pages.

OSVersionArchitecturePackageVersionFilename
ubuntu15.04noarchrequest-tracker4< 4.2.8-3+deb8u1build0.15.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	15.04	noarch	request-tracker4	< 4.2.8-3+deb8u1build0.15.04.1	UNKNOWN

References

github.com/bestpractical/rt/commit/4ec786bb4743f67a35a634c1bf43b13d3d3b39a9 (4.0.x)

github.com/bestpractical/rt/commit/67d517ba3421ba462e349c73207a627d137ef8ac (4.2.x)

launchpad.net/bugs/cve/CVE-2015-5475

nvd.nist.gov/vuln/detail/CVE-2015-5475

security-tracker.debian.org/tracker/CVE-2015-5475

www.cve.org/CVERecord?id=CVE-2015-5475

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.5%

JSON

Related for UB:CVE-2015-5475