CVE-2017-5943

—

CVSS 3.0

8.8 high

EPSS

<1%p56

Published

Jul 3, 2017 (Jul 3, 2017)

Modified

Jun 17, 2026

Description

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.

Vendors: bestpractical
Products: request tracker
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.