Request Tracker Security Vulnerabilities and Issues — Request Tracker CVE List

Lucene search

BestpracticalRequest Tracker

2 matches found

CVE•added 2017/07/03 4:29 p.m.•164 views

CVE-2017-5943

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.

8.8CVSS8.2AI score0.00409EPSS

CVE•added 2017/07/03 4:29 p.m.•86 views

CVE-2017-5944

The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name.

8.8CVSS8.5AI score0.04438EPSS