tocsin

Debian/request-tracker4: unknown

Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via un

Action: Upgrade request-tracker4 to 4.0.5-3 or later.

Affected

introducedfixedlast affected
04.0.5-3-

Fixed versions

4.0.5-3

Sources

published · modified · JSON