tocsin

Alpine/rt4: high 7.5

Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call.

Action: Upgrade rt4 to 4.4.7-r0 or later.

Affected

introducedfixedlast affected
04.4.7-r0-

Fixed versions

4.4.7-r0

Sources

published · modified · JSON