Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-4732
6.8
MEDIUMCVSS v2
Published
November 11, 2012
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
bestpractical/rt
GitHubRequest Tracker, an enterprise-grade issue tracking system
GitHubRequest Tracker, an enterprise-grade issue tracking system= 3.8.13, = 3.8.14, = 3.8.12, = 4.0.6, = 4.0.8, = 4.0.7NVD