CVE-2009-3892

N/A Unknown

Published: November 17, 2009 Modified: April 23, 2026

Description

Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546778

Source: secalert@redhat.com

http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000172.html

Source: secalert@redhat.com

Patch

http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000173.html

Source: secalert@redhat.com

Patch

http://www.openwall.com/lists/oss-security/2009/11/15/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2009/11/16/4

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546778