| Package | Affected versions | Patched versions |
|---|---|---|
| request tracker | = 4.2.0= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.2.8= 4.2.9≤ 4.0.22 |
RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free