{"action":"Upgrade request-tracker4 to 4.0.5-3 or later.","affected":[{"fixed":"4.0.5-3","introduced":"0"}],"component":"request-tracker4","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["4.0.5-3"],"id":"tcs_01M5N9X5DCGFBJ4SZ1ZPM63840","modified_at":"2026-10-23T17:47:44.214005589Z","published_at":"2012-06-04T19:55:01.853Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-4460","https://security-tracker.debian.org/tracker/CVE-2011-4460"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-4460","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-4460"}],"summary":"SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a"}