CVE-2012-4732
11.11.2012, 13:00
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
| Vendor | Product | Version |
|---|---|---|
| bestpractical | rt | 3.8.12 |
| bestpractical | rt | 3.8.13 |
| bestpractical | rt | 3.8.13:rc1 |
| bestpractical | rt | 3.8.13:rc2 |
| bestpractical | rt | 3.8.14 |
| bestpractical | rt | 3.8.14:rc1 |
| bestpractical | rt | 4.0.6 |
| bestpractical | rt | 4.0.7:rc1 |
| bestpractical | rt | 4.0.8:rc1 |
| bestpractical | rt | 4.0.8:rc2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| request-tracker3.8 |
| ||||||||||||||||||||||||||||
| request-tracker4 |
|
Common Weakness Enumeration