Threats tagged 'ghsa-pg4w-4q6c-jvpm'

RTIR extends RT's HTML scrubber to allow an internal link placeholder, which inadvertently permits any link containing this placeholder, including javascript: scheme links. This affects the entire RT instance once RTIR is installed, allowing anyone who can add HTML content to a ticket, including unauthenticated senders to the Incident Reports queue, to embed such links. When a user clicks these links, scripts run with that user's privileges within RT. The issue was fixed in RT versions 5.0.11 and 6.0.4.