CyberRota Analysis
AI-GeneratedVersions 6.0.0 to 6.0.2 of the open-source RT issue tracking system are vulnerable to a reflected Cross-Site Scripting (XSS) flaw, allowing attackers to execute arbitrary JavaScript in the browser session of an authenticated user via a crafted URL. Organizations using affected versions should prioritize upgrading to version 6.0.3 to mitigate the risk, as there are no effective workarounds available. Users should also exercise caution and avoid clicking on untrusted RT URLs to reduce exposure to potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's browser session. There are no effective workarounds. Avoid following untrusted RT URLs. This issue has been fixed in version 6.0.3.
Related CVEs
Other vulnerabilities affecting the same vendor(s)