CVE-2012-4731

MEDIUM 4.0CVE-2012-4731 · Published 11/11/2012 · updated 16/06/2026

In short

CVE-2012-4731 is a MEDIUM (CVSS 4.0) vulnerability affecting rtfm (bestpractical).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
rtfm bestpractical	`= 2.2.0= 2.2.1= 2.2.2= 2.4.0= 2.4.1= 2.4.2≤ 2.4.3`	No fix yet

Description

FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.

References

lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
lists.bestpractical.com/pipermail/rt-announce/2012-October/000215.html
secunia.com/advisories/51062 · Vendor Advisory
secunia.com/advisories/51111 · Vendor Advisory
debian.org/security/2012/dsa-2568

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free