DEBIAN-CVE-2017-5944

DEBIAN-CVE-2017-5944 PUBLISHED CVSS 8.800000190734863 HIGH

The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name.

Risk Scores

CVSS 3.0

8.800000190734863

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:11	request-tracker4	0, 0, 0
Debian:12	request-tracker4	0, 0, 0

Timeline

Jul 3, 2017 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2017-5944 advisory

Open in Interactive Console →