vulnerability

Alpine Linux: CVE-2023-41260: Exposure of Sensitive Information to an Unauthorized Actor

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:N/A:N)

Published

Nov 3, 2023

Added

Oct 1, 2024

Modified

Jun 18, 2026

Description

Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls.

alpine-linux-upgrade-rt4

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.