Skip to content
OpenAdvisories
Unscored DSA-3176-1 3 CVEs

request-tracker4 - security update

Published Feb 26, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 request-tracker4 4.0.7-5+deb7u3

Vulnerabilities 3

  • Unscored —

    The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote att…

  • Unscored —

    RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sens…

  • Unscored —

    RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS fe…