CVE-2015-1464

EPSS 0.35%

Published: 3/9/2015Modified: 4/28/2026

Description

RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.

Affected packages (1)

Debian/request-tracker4from 0, < 4.2.8-3

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-1464