CVE-2023-41259

Description

Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call.

Reserved 2023-08-25 | Published 2023-11-03 | Updated 2024-09-05 | Assigner mitre

References

docs.bestpractical.com/release-notes/rt/index.html

docs.bestpractical.com/release-notes/rt/5.0.5

docs.bestpractical.com/release-notes/rt/4.4.7

cve.org (CVE-2023-41259)

nvd.nist.gov (CVE-2023-41259)

Download JSON