CVE-2017-5943 in Request Tracker

Summary

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 02/09/2017
• Disclosure: 07/03/2017
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-352 (Confirmed)
• CVSS: 6.5
• EPSS: 0.00409
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-5943
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-5943
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-5943/