VDB

DEBIAN-CVE-2013-3373

DEBIAN-CVE-2013-3373 PUBLISHED

CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.

Affected Products

VendorProductVersions
Debian:11request-tracker40, 0, 0
Debian:12request-tracker40, 0, 0

Timeline

  • Aug 23, 2013 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›