Vulnerabilities

TI-2026-32209 CVE-2026-44230

RT: Reflected Cross-Site Scripting in search results chart

LOW 26

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00155 Published 2026-07-20 Fixed in 5.0.10, 6.0.3 CWE-79

TI-2026-32210 CVE-2026-44231

RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint

LOW 39

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-07-20 Fixed in 5.0.10, 6.0.3 CWE-200

TI-2026-32208 CVE-2026-44229

RT: Cross-Site Scripting via inline-served uploaded content

LOW 23

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00141 Published 2026-07-20 Fixed in 6.0.3, 5.0.10 CWE-79

TI-2026-32207 CVE-2026-44228

RT: Stored Cross-Site Scripting via insufficient template escaping

LOW 24

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00255 Published 2026-07-20 Fixed in 6.0.3 CWE-79

TI-2026-32206 CVE-2026-44227

RT: Reflected Cross-Site Scripting via URL parameters

LOW 27

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00263 Published 2026-07-20 Fixed in 6.0.3 CWE-79

TI-2026-29714 CVE-2026-41076

RT: LDAP authentication bypass via empty password

LOW 37

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-05-22 Fixed in 5.0.10, 6.0.3 CWE-287

TI-2026-29713 CVE-2026-41075

RT: SQL injection via entry_aggregator parameter in JSON search

MEDIUM 40

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00344 Published 2026-05-22 Fixed in 5.0.10, 6.0.3 CWE-89

TI-2026-29712 CVE-2026-41074

RT has broken CSRF protection for authenticated users

LOW 30

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00117 Published 2026-05-22 Fixed in 6.0.3 CWE-352

TI-2026-29711 CVE-2026-41073

RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps

LOW 20

RT is an open source, enterprise-grade issue and ticket tracking system.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00166 Published 2026-05-22 Fixed in 5.0.10, 6.0.3 CWE-1236

TI-2026-06000 CVE-2026-6841 · GHSA-79vr-q653-q96g

Reflected XSS in Request Tracker

LOW 29

Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00235 Published 2026-05-21 Fixed in 5.0.10, 6.0.3 CWE-79

TI-2025-38247 CVE-2025-61873 · GHSA-3rc2-78m3-cqmh

CSV injection in bestpractical Request Tracker

LOW 13

Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.

CVSS 3.1LOW 2.6 Network High privileges User interaction EPSS 0.00222 Published 2026-01-16 Fixed in 4.4.9, 5.0.9 +1 CWE-1236

TI-2025-08397 CVE-2025-9158 · GHSA-4wp5-pw3x-6v2m

Stored XSS in Request Tracker

LOW 30

The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which displays invitation data without HTML sanitization.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00447 Published 2025-10-24 No fix listed CWE-79

TI-2025-22681 CVE-2025-31501 · GHSA-9j47-qv65-j87p

Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.

LOW 37

Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00252 Published 2025-05-28 Fixed in 5.0.8 CWE-79

TI-2025-22680 CVE-2025-31500 · GHSA-76w2-jhhw-cjjj

Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.

LOW 37

Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00252 Published 2025-05-28 Fixed in 5.0.8 CWE-79

TI-2025-21439 CVE-2025-30087 · GHSA-2jfq-9qf9-jmjj

Cross-site scripting in bestpractical RT

LOW 38

Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00326 Published 2025-05-28 Fixed in 4.4.8, 5.0.8 CWE-79

TI-2023-24078 CVE-2023-45024 · GHSA-9xrr-x36v-8929

Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a…

MEDIUM 40

Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00712 Published 2023-11-03 No fix listed CWE-200

TI-2023-21865 CVE-2023-41260 · GHSA-w2c3-h72m-ch9w

Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information…

MEDIUM 40

Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00869 Published 2023-11-03 No fix listed CWE-200

TI-2023-21864 CVE-2023-41259 · GHSA-22g7-wp2f-rmqf

Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information…

MEDIUM 41

Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00884 Published 2023-11-03 No fix listed CWE-200

TI-2022-09374 CVE-2022-25803 · GHSA-p47r-g523-cx3r

Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.

LOW 28

Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0056 Published 2022-07-14 No fix listed CWE-601

TI-2022-09373 CVE-2022-25802 · GHSA-q26c-cxjj-m3hx

Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a…

LOW 29

Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2022-07-14 No fix listed CWE-79

TI-2022-09372 CVE-2022-25801 · GHSA-j59r-m36g-g64f

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools.

MEDIUM 41

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00907 Published 2022-07-14 No fix listed CWE-918

TI-2022-09371 CVE-2022-25800 · GHSA-8xpw-q9jp-x2c7

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.

MEDIUM 41

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00907 Published 2022-07-14 No fix listed CWE-918

TI-2021-16157 CVE-2021-38562 · GHSA-f58f-h8w5-jgjr

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before…

LOW 37

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01835 Published 2021-10-18 No fix listed CWE-203

TI-2018-13392 CVE-2018-18898 · GHSA-6rmj-6826-5j8h

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows…

LOW 37

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02356 Published 2019-03-17 No fix listed CWE-400

TI-2017-03862 CVE-2017-5944 · GHSA-fcc9-mfrp-452q

The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x…

MEDIUM 43

The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a c…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02784 Published 2017-07-03 No fix listed CWE-20

Vulnerabilities

Filters