CVE-2023-41259

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 3, 2023
Updated: Nov 13, 2023

Summary

CVE-2023-41259 is a vulnerability affecting Best Practical Request Tracker (RT) versions prior to 4.4.7 and 5.x before 5.0.5. This issue enables an attacker to disclose information through the use of fake or spoofed email headers in an RT email message or a mail-gateway REST API call. By manipulating these headers, attackers can potentially gain unauthorized access to sensitive data, posing a significant risk to system security. Organizations using the affected RT versions should update to the latest patches to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share