CVE-2013-3371

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.

• CWE-79

• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.htmlPatch
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.htmlPatch
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.htmlPatch
• http://secunia.com/advisories/53505Vendor Advisory
• http://secunia.com/advisories/53522Vendor Advisory
• http://www.debian.org/security/2012/dsa-2670
• http://www.osvdb.org/93608
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.htmlPatch
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.htmlPatch
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.htmlPatch
• http://secunia.com/advisories/53505Vendor Advisory
• http://secunia.com/advisories/53522Vendor Advisory
• http://www.debian.org/security/2012/dsa-2670
• http://www.osvdb.org/93608

Published

Aug 23, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-3365TRENDnet TEW-812DRU router allows remote authenticated users…
• CVE-2013-3366Undocumented TELNET service in TRENDnet TEW-812DRU when a we…8.8
• CVE-2013-3367Undocumented TELNET service in TRENDnet TEW-691GR and TEW-69…9.8
• CVE-2013-3368bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x…
• CVE-2013-3369Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.…
• CVE-2013-3370Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.…
• CVE-2013-3372Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.…
• CVE-2013-3373CRLF injection vulnerability in Request Tracker (RT) 3.8.x b…
• CVE-2013-3374Unspecified vulnerability in Request Tracker (RT) 3.8.x befo…
• CVE-2013-3375Cross-site scripting (XSS) vulnerability in the portal page …
• CVE-2013-3376Open redirect vulnerability in the help page in Cisco Video …
• CVE-2013-3377Cisco TelePresence TC Software before 5.1.7 and TE Software …