CVE-2017-5943

HOCH 8.8CVE-2017-5943 · Published 03/07/2017 · updated 17/06/2026

Kurz gesagt

CVE-2017-5943 ist eine Schwachstelle (HOCH (CVSS 8.8)) in request tracker (bestpractical).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.83%, höher als bei 57.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
request tracker bestpractical	`= 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.14= 4.0.15= 4.0.16= 4.0.17= 4.0.18= 4.0.19= 4.0.2= 4.0.20= 4.0.21= 4.0.22= 4.0.23= 4.0.24= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.2.0= 4.2.1= 4.2.10= 4.2.11= 4.2.12= 4.2.13= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.2.8= 4.2.9= 4.4.0= 4.4.1`	No fix yet

Description

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.

References

debian.org/security/2017/dsa-3882 · Third Party Advisory
securityfocus.com/bid/99384 · Third Party Advisory
forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016 · Vendor Advisory

Weitere Schwachstellen in request tracker

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

request tracker

bestpractical

= 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.14= 4.0.15= 4.0.16= 4.0.17= 4.0.18= 4.0.19= 4.0.2= 4.0.20= 4.0.21= 4.0.22= 4.0.23= 4.0.24= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.2.0= 4.2.1= 4.2.10= 4.2.11= 4.2.12= 4.2.13= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.2.8= 4.2.9= 4.4.0= 4.4.1

No fix yet

Weitere Schwachstellen in request tracker

Alle anzeigen →