VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 3, 2017· Updated Jun 17, 2026

CVE-2017-5943

CVE-2017-5943

Description

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

42
  • Bestpractical/Request Tracker41 versions
    cpe:2.3:a:bestpractical:request_tracker:4.0.0:*:*:*:*:*:*:*+ 40 more
    • cpe:2.3:a:bestpractical:request_tracker:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.14:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.15:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.16:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.17:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.18:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.19:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.20:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.21:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.22:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.23:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.24:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.10:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.11:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.12:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.13:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.2.9:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.4.1:*:*:*:*:*:*:*
  • Request Tracker/Request Trackerllm-create
    Range: <4.0.25, <4.2.14, <4.4.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.