Bestpractical Request Tracker vulnerabilities

• bestpractical rt, request tracker +1 more RT: Stored Cross-Site Scripting via insufficient template escaping CVE-2026-44228 5.4 MediumJuly 20, 2026
• best practical request tracker Reflected XSS in Request Tracker CVE-2026-6841 Fix available 5.1 MediumMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint CVE-2026-44231 Fix available 9.1 CriticalMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Reflected Cross-Site Scripting in search results chart CVE-2026-44230 Fix available 6.1 MediumMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Cross-Site Scripting via inline-served uploaded content CVE-2026-44229 Fix available 5.4 MediumMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Reflected Cross-Site Scripting via URL parameters CVE-2026-44227 6.1 MediumMay 20, 2026
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an... CVE-2025-31501 Fix available 7.2 HighApril 30, 2025
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an... CVE-2025-31500 Fix available 7.2 HighApril 30, 2025
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via... CVE-2025-30087 Fix available 7.2 HighApril 30, 2025
• bestpractical request tracker Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a... CVE-2023-45024 Fix available 7.5 HighOctober 30, 2023
• best practical solutions request tracker Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure... CVE-2023-41260 Fix available 7.5 HighOctober 30, 2023
• best practical solutions request tracker Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information... CVE-2023-41259 Fix available 7.5 HighOctober 30, 2023
• bestpractical request tracker Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search. CVE-2022-25803 Fix available 6.1 MediumJuly 14, 2022
• bestpractical request tracker for incident response Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via... CVE-2022-25801 9.1 CriticalJuly 14, 2022
• bestpractical request tracker for incident response Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via... CVE-2022-25800 9.1 CriticalJuly 14, 2022
• bestpractical request tracker Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted... CVE-2022-25802 Fix available 6.1 MediumJuly 13, 2022
• bestpractical request tracker, debian linux, fedoraproject fedora +2 more Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2... CVE-2021-38562 Fix available 7.5 HighOctober 18, 2021
• bestpractical request tracker, canonical ubuntu linux, debian linux +1 more +3 more The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of... CVE-2018-18898 Fix available 7.5 HighMarch 17, 2019
• bestpractical request tracker The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2... CVE-2017-5944 Fix available 8.8 HighJune 15, 2017
• bestpractical request tracker Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote... CVE-2017-5943 Fix available 8.8 HighJune 15, 2017
• bestpractical request tracker Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use... CVE-2017-5361 Fix available 5.9 MediumJune 15, 2017
• bestpractical request tracker Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before... CVE-2016-6127 Fix available 6.1 MediumJune 15, 2017
• bestpractical request tracker Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT)... CVE-2015-6506 Fix available 4.3 MediumAugust 13, 2015
• bestpractical request tracker Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12... CVE-2015-5475 Fix available 4.3 MediumAugust 13, 2015
• bestpractical request tracker, fedoraproject fedora +1 more RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack... CVE-2015-1464 Fix available 6.4 MediumFebruary 26, 2015
• bestpractical request tracker, debian linux, fedoraproject fedora +2 more RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote... CVE-2015-1165 Fix available 5.0 MediumFebruary 26, 2015
• bestpractical request tracker, debian linux, fedoraproject fedora +2 more The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4... CVE-2014-9472 Fix available 7.1 HighFebruary 26, 2015
• bestpractical request tracker The MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0... CVE-2013-3737 5.0 MediumNovember 16, 2014
• bestpractical request tracker, rt-extension-mobileui +1 more Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension... CVE-2013-3736 4.3 MediumMay 5, 2014
• bestpractical request tracker ** DISPUTED ** SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and... CVE-2013-3525 Public exploitDisputed 7.5 HighMay 10, 2013
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... CVE-2012-6581 Fix available 4.3 MediumOctober 26, 2012
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... CVE-2012-6580 Fix available 4.3 MediumOctober 26, 2012
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... CVE-2012-6579 Fix available 6.4 MediumOctober 26, 2012
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled... CVE-2012-6578 Fix available 4.3 MediumOctober 26, 2012