Beveiligingsadvies

CVE-2026-44227

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 17:32:48

Laatst bijgewerkt 2026-07-20 19:06:52

Toegewezen door GitHub_M

CVSS-score 6.1

Status PUBLISHED

Beschrijving

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's browser session. There are no effective workarounds. Avoid following untrusted RT URLs. This issue has been fixed in version 6.0.3.

← Alle CVE's bekijken Bekijk op cve.org ↗