The dashboard subscription interface in Request Tracker (RT) 4.x prior to 4.0.25, 4.2.x prior to 4.2.14, and 4.4.x prior to 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
bestpractical request tracker 4.0.3 |
||
bestpractical request tracker 4.0.5 |
||
bestpractical request tracker 4.0.12 |
||
bestpractical request tracker 4.0.14 |
||
bestpractical request tracker 4.0.19 |
||
bestpractical request tracker 4.0.21 |
||
bestpractical request tracker 4.2.3 |
||
bestpractical request tracker 4.2.5 |
||
bestpractical request tracker 4.2.12 |
||
bestpractical request tracker 4.4.1 |
||
bestpractical request tracker 4.0.7 |
||
bestpractical request tracker 4.0.8 |
||
bestpractical request tracker 4.0.9 |
||
bestpractical request tracker 4.0.10 |
||
bestpractical request tracker 4.0.23 |
||
bestpractical request tracker 4.0.24 |
||
bestpractical request tracker 4.2.0 |
||
bestpractical request tracker 4.2.1 |
||
bestpractical request tracker 4.2.2 |
||
bestpractical request tracker 4.4.0 |
||
bestpractical request tracker 4.0.0 |
||
bestpractical request tracker 4.0.1 |
||
bestpractical request tracker 4.0.2 |
||
bestpractical request tracker 4.0.15 |
||
bestpractical request tracker 4.0.16 |
||
bestpractical request tracker 4.0.17 |
||
bestpractical request tracker 4.0.18 |
||
bestpractical request tracker 4.2.7 |
||
bestpractical request tracker 4.2.8 |
||
bestpractical request tracker 4.2.9 |
||
bestpractical request tracker 4.2.10 |
||
bestpractical request tracker 4.0.4 |
||
bestpractical request tracker 4.0.6 |
||
bestpractical request tracker 4.0.11 |
||
bestpractical request tracker 4.0.13 |
||
bestpractical request tracker 4.0.20 |
||
bestpractical request tracker 4.0.22 |
||
bestpractical request tracker 4.2.4 |
||
bestpractical request tracker 4.2.6 |
||
bestpractical request tracker 4.2.11 |
||
bestpractical request tracker 4.2.13 |
Vulmon