Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Request_tracker
(Bestpractical)| Repositories | https://github.com/bestpractical/rt |
| #Vulnerabilities | 26 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2025-05-28 | CVE-2025-30087 | Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL. | Request_tracker | 6.1 | ||
| 2025-05-28 | CVE-2025-31500 | Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name. | Request_tracker | 6.1 | ||
| 2025-05-28 | CVE-2025-31501 | Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink. | Request_tracker | 6.1 |