Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the CustomFieldValuesSources (aka external custom field) option is enabled, allows remote authenticated users to execute arbitrary code via unspecified vectors, as demonstrated by a cross-site request forgery (CSRF) attack.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2011-04-22T10:00:00
Updated: 2024-08-06T22:37:24.581Z
Reserved: 2011-04-13T00:00:00
Link: CVE-2011-1685
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-04-22T10:55:02.297
Modified: 2017-08-17T01:34:19.447
Link: CVE-2011-1685
Redhat
No data.