CVE-2012-4732
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions...
CVE-2012-4732 is a medium vulnerability (CVSS 6.8) in Bestpractical Rt, published October 26, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.87%, the 58th percentile. Fixed in request-tracker4 4.0.7-2.
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
Exploit likelihood
What each source reports
NVD Score used
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
- Record
CVE-2012-4732- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List No score
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
- Record
CVE-2012-4732- Updated
- 2026-11-02
EUVDEUVD-2012-4657 No score
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
- Record
EUVD-2012-4657- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8q74-38rr-629p No score
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions...
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
- Record
GHSA-8q74-38rr-629p- Weakness
- CWE-352
- Updated
- 2026-11-02
OSV No score
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
- Record
CVE-2012-4732- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4732 No score
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
- Record
DEBIAN-CVE-2012-4732- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
request-tracker4Debian:12 |
before 4.0.7-2 | 4.0.7-2 |
request-tracker3.8Debian:6.0 |
before 3.8.8-7+squeeze6, plus listed versions 3.8.8-73.8.8-7+squeeze13.8.8-7+squeeze1~bpo50+13.8.8-7+squeeze23.8.8-7+squeeze33.8.8-7+squeeze43.8.8-7+squeeze5 |
3.8.8-7+squeeze6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |