Lucene search

K
prionPRIOn knowledge basePRION:CVE-2012-4733
HistoryAug 23, 2013 - 4:55 p.m.

Cross site request forgery (csrf)

2013-08-2316:55:00
PRIOn knowledge base
www.prio-n.com
4

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.2%

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and “custom lifecycle transition” permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

Rows per page:
1-10 of 191

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.2%