Request Tracker

DATE	CVE	VULNERABILITY TITLE	RISK
2017-07-03	CVE-2016-6127	Cross-site Scripting vulnerability in Bestpractical Request Tracker Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2, when the AlwaysDownloadAttachments config setting is not in use, allows remote attackers to inject arbitrary web script or HTML via a file upload with an unspecified content type. network low complexity bestpractical CWE-79	6.1