Vulnerability Database

299,879

Total vulnerabilities in the database

CVE-2017-5943

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.

  • Published: Jul 3, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-5943
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
bestpractical / request_tracker 4.2.3 4.2.3.x
bestpractical / request_tracker 4.2.6 4.2.6.x
bestpractical / request_tracker 4.0.18 4.0.18.x
bestpractical / request_tracker 4.0.0 4.0.0.x
bestpractical / request_tracker 4.0.6 4.0.6.x
bestpractical / request_tracker 4.2.12 4.2.12.x
bestpractical / request_tracker 4.0.7 4.0.7.x
bestpractical / request_tracker 4.0.17 4.0.17.x
bestpractical / request_tracker 4.0.21 4.0.21.x
bestpractical / request_tracker 4.0.22 4.0.22.x
bestpractical / request_tracker 4.0.5 4.0.5.x
bestpractical / request_tracker 4.2.2 4.2.2.x
bestpractical / request_tracker 4.0.15 4.0.15.x
bestpractical / request_tracker 4.2.7 4.2.7.x
bestpractical / request_tracker 4.2.0 4.2.0.x
bestpractical / request_tracker 4.0.1 4.0.1.x
bestpractical / request_tracker 4.0.2 4.0.2.x
bestpractical / request_tracker 4.0.10 4.0.10.x
bestpractical / request_tracker 4.2.10 4.2.10.x
bestpractical / request_tracker 4.0.9 4.0.9.x
bestpractical / request_tracker 4.0.14 4.0.14.x
bestpractical / request_tracker 4.0.4 4.0.4.x
bestpractical / request_tracker 4.2.5 4.2.5.x
bestpractical / request_tracker 4.0.11 4.0.11.x
bestpractical / request_tracker 4.2.13 4.2.13.x
bestpractical / request_tracker 4.0.24 4.0.24.x
bestpractical / request_tracker 4.2.4 4.2.4.x
bestpractical / request_tracker 4.0.12 4.0.12.x
bestpractical / request_tracker 4.4.1 4.4.1.x
bestpractical / request_tracker 4.2.8 4.2.8.x
bestpractical / request_tracker 4.2.9 4.2.9.x
bestpractical / request_tracker 4.0.19 4.0.19.x
bestpractical / request_tracker 4.0.13 4.0.13.x
bestpractical / request_tracker 4.0.23 4.0.23.x
bestpractical / request_tracker 4.0.8 4.0.8.x
bestpractical / request_tracker 4.2.1 4.2.1.x
bestpractical / request_tracker 4.0.3 4.0.3.x
bestpractical / request_tracker 4.2.11 4.2.11.x
bestpractical / request_tracker 4.0.16 4.0.16.x
bestpractical / request_tracker 4.4.0 4.4.0.x
bestpractical / request_tracker 4.0.20 4.0.20.x