CVE-2017-5943

Published: Jul 3, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.

Affected (41)

Products: Bestpractical: Request Tracker

Bestpractical

1 product

Request Tracker

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Request Tracker	Version 4.0.0
Bestpractical Request Tracker	Version 4.0.10
Bestpractical Request Tracker	Version 4.0.11
Bestpractical Request Tracker	Version 4.0.12
Bestpractical Request Tracker	Version 4.0.13
Bestpractical Request Tracker	Version 4.0.14
Bestpractical Request Tracker	Version 4.0.15
Bestpractical Request Tracker	Version 4.0.16
Bestpractical Request Tracker	Version 4.0.17
Bestpractical Request Tracker	Version 4.0.18
Bestpractical Request Tracker	Version 4.0.19
Bestpractical Request Tracker	Version 4.0.1
Bestpractical Request Tracker	Version 4.0.20
Bestpractical Request Tracker	Version 4.0.21
Bestpractical Request Tracker	Version 4.0.22
Bestpractical Request Tracker	Version 4.0.23
Bestpractical Request Tracker	Version 4.0.24
Bestpractical Request Tracker	Version 4.0.2
Bestpractical Request Tracker	Version 4.0.3
Bestpractical Request Tracker	Version 4.0.4
Bestpractical Request Tracker	Version 4.0.5
Bestpractical Request Tracker	Version 4.0.6
Bestpractical Request Tracker	Version 4.0.7
Bestpractical Request Tracker	Version 4.0.8
Bestpractical Request Tracker	Version 4.0.9
Bestpractical Request Tracker	Version 4.2.0
Bestpractical Request Tracker	Version 4.2.10
Bestpractical Request Tracker	Version 4.2.11
Bestpractical Request Tracker	Version 4.2.12
Bestpractical Request Tracker	Version 4.2.13
Bestpractical Request Tracker	Version 4.2.1
Bestpractical Request Tracker	Version 4.2.2
Bestpractical Request Tracker	Version 4.2.3
Bestpractical Request Tracker	Version 4.2.4
Bestpractical Request Tracker	Version 4.2.5
Bestpractical Request Tracker	Version 4.2.6
Bestpractical Request Tracker	Version 4.2.7
Bestpractical Request Tracker	Version 4.2.8
Bestpractical Request Tracker	Version 4.2.9
Bestpractical Request Tracker	Version 4.4.0
Bestpractical Request Tracker	Version 4.4.1