Bestpractical: >> Request Tracker >> 4.4.0 Security Vulnerabilities
Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.
CVSS Score
8.8
EPSS Score
0.004
Published
2017-07-03
The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name.
CVSS Score
8.8
EPSS Score
0.044
Published
2017-07-03
Page 2