https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:54:18 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-44230 <p>RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user&#39;s browser session. This issue has been fixed in versions 5.0.10 and 6.0.3.</p> <p>RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user&#39;s browser session. This issue has been fixed in versions 5.0.10 and 6.0.3.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-44230 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-44230 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: request-tracker5, Ubuntu:Pro:24.04:LTS: request-tracker5, Ubuntu:25.10: request-tracker5, Ubuntu:Pro:26.04:LTS: request-tracker5</p> <p>RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user&#39;s browser session. This issue has been fixed in versions 5.0.10 and 6.0.3.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: request-tracker5, Ubuntu:Pro:24.04:LTS: request-tracker5, Ubuntu:25.10: request-tracker5, Ubuntu:Pro:26.04:LTS: request-tracker5</p> <p>RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user&#39;s browser session. This issue has been fixed in versions 5.0.10 and 6.0.3.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-44230