Request Tracker

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:request_tracker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329)
ProductRequest Tracker (fee70a71-3857-5843-ba77-7570d7c72d76)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bestpractical/rt purl2cpe 2026-06-01 10:13:30.967881

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-61873 vulnerable 2026-06-08 07:37:28.290339 Details available
LOW (2.6)
Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.
Published: 2026-01-16T00:00:00.000Z
Updated: 2026-01-16T18:31:10.182Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31501 vulnerable 2026-06-08 07:18:57.979770 Details available
HIGH (7.2)
Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.
Published: 2025-05-28T00:00:00.000Z
Updated: 2025-05-28T17:59:29.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31500 vulnerable 2026-06-08 07:18:57.979193 Details available
HIGH (7.2)
Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.
Published: 2025-05-28T00:00:00.000Z
Updated: 2025-05-28T17:59:47.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30087 vulnerable 2026-06-08 07:16:59.052770 Details available
HIGH (7.2)
Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.
Published: 2025-05-28T00:00:00.000Z
Updated: 2025-11-03T19:46:45.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45024 vulnerable 2026-06-08 06:12:41.640126 Details available
Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.
Published: 2023-11-03T00:00:00.000Z
Updated: 2024-09-06T14:00:30.482Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41260 vulnerable 2026-06-08 06:11:05.681018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41259 vulnerable 2026-06-08 06:11:05.680418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25803 vulnerable 2026-06-08 05:41:49.491086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25802 vulnerable 2026-06-08 05:41:49.490703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38562 vulnerable 2026-06-08 05:33:47.879176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18898 vulnerable 2026-06-08 05:11:14.941250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6506 vulnerable 2026-06-08 05:06:52.583718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5475 vulnerable 2026-06-08 05:06:50.109045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1464 vulnerable 2026-06-08 05:06:25.710008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3525 vulnerable 2026-06-08 05:04:31.897042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.