VULNERABILITY INTELLIGENCE

CVE-2012-4732

CVSS score6.8 MEDIUM

EPSS probability0.87%

CISA KEVNot currently listed

Published2012-11-11

Last modified2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.