Bestpractical Rt vulnerabilities

• bestpractical rt, request tracker +1 more RT: Stored Cross-Site Scripting via insufficient template escaping CVE-2026-44228 5.4 MediumJuly 20, 2026
• bestpractical rt RT: LDAP authentication bypass via empty password CVE-2026-41076 Fix available 8.1 HighMay 22, 2026
• bestpractical rt RT: SQL injection via entry_aggregator parameter in JSON search CVE-2026-41075 Fix available 8.8 HighMay 22, 2026
• bestpractical rt RT has broken CSRF protection for authenticated users CVE-2026-41074 7.1 HighMay 22, 2026
• bestpractical rt RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps CVE-2026-41073 Fix available 4.6 MediumMay 22, 2026
• bestpractical rt, request tracker +1 more RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint CVE-2026-44231 Fix available 9.1 CriticalMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Reflected Cross-Site Scripting in search results chart CVE-2026-44230 Fix available 6.1 MediumMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Cross-Site Scripting via inline-served uploaded content CVE-2026-44229 Fix available 5.4 MediumMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Reflected Cross-Site Scripting via URL parameters CVE-2026-44227 6.1 MediumMay 20, 2026
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an... CVE-2025-31501 Fix available 7.2 HighApril 30, 2025
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an... CVE-2025-31500 Fix available 7.2 HighApril 30, 2025
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via... CVE-2025-30087 Fix available 7.2 HighApril 30, 2025
• bestpractical rt, email\ \ +1 more Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0... CVE-2014-1474 Fix available 5.0 MediumJuly 15, 2014
• bestpractical request tracker, rt-extension-mobileui +1 more Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension... CVE-2013-3736 4.3 MediumMay 5, 2014
• bestpractical rt Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when... CVE-2013-5587 Fix available 2.6 LowMay 22, 2013
• bestpractical rt Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13,... CVE-2013-3374 Fix available 4.3 MediumMay 22, 2013
• bestpractical rt CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13... CVE-2013-3373 Fix available 5.0 MediumMay 22, 2013
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to... CVE-2013-3372 Fix available 4.3 MediumMay 22, 2013
• bestpractical rt Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x... CVE-2013-3371 Fix available 4.3 MediumMay 22, 2013
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict... CVE-2013-3370 Fix available 6.8 MediumMay 22, 2013
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated... CVE-2013-3369 Fix available 6.0 MediumMay 22, 2013
• bestpractical rt bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to... CVE-2013-3368 Fix available 3.3 LowMay 22, 2013
• bestpractical rt Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom... CVE-2012-4733 Fix available 6.0 MediumMay 22, 2013
• bestpractical rt Argument injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0... CVE-2012-4884 Fix available 5.0 MediumOctober 26, 2012
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to... CVE-2012-4734 Fix available 5.0 MediumOctober 26, 2012
• bestpractical rt Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions... CVE-2012-4732 Fix available 6.8 MediumOctober 26, 2012
• bestpractical rtfm FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which... CVE-2012-4731 Fix available 4.0 MediumOctober 26, 2012
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users... CVE-2012-4730 Fix available 3.5 LowOctober 26, 2012
• bestpractical rt Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode... CVE-2011-5093 6.5 MediumJune 4, 2012
• bestpractical rt Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to... CVE-2011-5092 7.5 HighJune 4, 2012
• bestpractical rt SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x... CVE-2011-4460 Fix available 6.5 MediumMay 24, 2012
• bestpractical rt Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable... CVE-2011-4459 Fix available 3.5 LowMay 24, 2012
• bestpractical rt Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the... CVE-2011-4458 Fix available 6.8 MediumMay 24, 2012
• bestpractical rt Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before... CVE-2011-2085 Fix available 6.8 MediumMay 24, 2012
• bestpractical rt Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated... CVE-2011-2084 Fix available 4.0 MediumMay 24, 2012
• bestpractical rt Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8... CVE-2011-2083 Fix available 4.3 MediumMay 24, 2012
• bestpractical rt The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4... CVE-2011-2082 Fix available 5.0 MediumMay 24, 2012
• bestpractical rt Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers... CVE-2011-1690 4.3 MediumApril 19, 2011
• bestpractical rt Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through... CVE-2011-1689 4.3 MediumApril 19, 2011
• bestpractical rt Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0... CVE-2011-1688 4.3 MediumApril 19, 2011
• bestpractical rt Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0... CVE-2011-1687 4.0 MediumApril 19, 2011
• bestpractical rt Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0... CVE-2011-1686 6.5 MediumApril 19, 2011
• bestpractical rt Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the... CVE-2011-1685 4.6 MediumApril 19, 2011
• bestpractical rt Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access... CVE-2011-1008 4.0 MediumFebruary 28, 2011
• bestpractical rt Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login,... CVE-2011-1007 2.1 LowFebruary 28, 2011
• bestpractical rt Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm... CVE-2011-0009 Fix available 4.3 MediumJanuary 22, 2011
• bestpractical rt Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT... CVE-2009-4151 5.8 MediumDecember 2, 2009
• bestpractical rt Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT... CVE-2009-3585 5.8 MediumDecember 2, 2009
• bestpractical rt Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x... CVE-2009-3892 4.3 MediumNovember 17, 2009
• bestpractical rt Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote... CVE-2008-3502 4.0 MediumAugust 6, 2008