Security Advisory

CVE-2026-44227

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-20 17:32:48

Last updated 2026-07-20 19:06:52

Assigner GitHub_M

CVSS score 6.1

State PUBLISHED

Description

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's browser session. There are no effective workarounds. Avoid following untrusted RT URLs. This issue has been fixed in version 6.0.3.

← Browse all CVEs View on cve.org ↗