{"action":"Upgrade request-tracker4 to 4.0.5-3 or later.","affected":[{"fixed":"4.0.5-3","introduced":"0"}],"component":"request-tracker4","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["4.0.5-3"],"id":"tcs_01M5N9X5543P6B4PR6NARNK215","modified_at":"2026-10-23T17:47:47.466496410Z","published_at":"2012-06-04T19:55:01.727Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-4458","https://security-tracker.debian.org/tracker/CVE-2011-4458"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-4458","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-4458"}],"summary":"Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via un"}