https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-01T21:45:29.332846+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-105456 fkie_cve-2026-105456 2026-11-01T21:45:29.334524+00:00

RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own queues. Anyone who can add HTML content to a ticket on such an instance can store such a link. That includes an unauthenticated sender of HTML email to the Incident Reports queue, which RTIR opens to everyone by default. Script runs when a user clicks the link, in that user's session, and can act in RT with that user's authority.

This issue was fixed in version 5.0.11 and 6.0.4

 https://db.gcve.eu/vuln/ghsa-pg4w-4q6c-jvpm GHSA-pg4w-4q6c-jvpm 2026-11-01T21:45:29.334624+00:00

RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own queues. Anyone who can add HTML content to a ticket on such an instance can store such a link. That includes an unauthenticated sender of HTML email to the Incident Reports queue, which RTIR opens to everyone by default. Script runs when a user clicks the link, in that user's session, and can act in RT with that user's authority.

This issue was fixed in version 5.0.11 and 6.0.4