Filtered by vendor Bestpractical Subscriptions
Filtered by product Request Tracker Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-38562 3 Bestpractical, Debian, Fedoraproject 3 Request Tracker, Debian Linux, Fedora 2024-08-04 7.5 High
Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.
CVE-2022-25802 1 Bestpractical 1 Request Tracker 2024-08-03 6.1 Medium
Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment.
CVE-2022-25803 1 Bestpractical 1 Request Tracker 2024-08-03 6.1 Medium
Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.