FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-01-30 04:04:33 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
416ca0f4-3fe0-11e9-bbdd-6805ca0b3d42	rt -- XSS via jQuery BestPractical reports: The version of jQuery used in RT 4.2 and 4.4 has a Cross-site Scripting (XSS) vulnerability when using cross-domain Ajax requests. This vulnerability is assigned CVE-2015-9251. RT does not use this jQuery feature so it is not directly vulnerable. jQuery version 1.12 no longer receives official updates, however a fix was posted with recommendations for applications to patch locally, so RT will follow this recommendation and ship with a patched version. Discovery 2019-03-05 Entry 2019-03-06 rt42 >= 4.2.0 lt 4.2.16 rt44 >= 4.4.0 lt 4.4.4 https://docs.bestpractical.com/release-notes/rt/4.4.4 https://docs.bestpractical.com/release-notes/rt/4.2.16 CVE-2015-9251

VuXML ID

Description

416ca0f4-3fe0-11e9-bbdd-6805ca0b3d42

rt -- XSS via jQuery

BestPractical reports:

The version of jQuery used in RT 4.2 and 4.4 has a Cross-site Scripting (XSS) vulnerability when using cross-domain Ajax requests. This vulnerability is assigned CVE-2015-9251. RT does not use this jQuery feature so it is not directly vulnerable. jQuery version 1.12 no longer receives official updates, however a fix was posted with recommendations for applications to patch locally, so RT will follow this recommendation and ship with a patched version.

Discovery 2019-03-05
Entry 2019-03-06
rt42

>= 4.2.0 lt 4.2.16

rt44

>= 4.4.0 lt 4.4.4

https://docs.bestpractical.com/release-notes/rt/4.4.4
https://docs.bestpractical.com/release-notes/rt/4.2.16
CVE-2015-9251