📦 Request Tracker

by Bestpractical

🔍 What is Request Tracker?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-30087

HIGH CVSS 7.2 May 28, 2025

This cross-site scripting (XSS) vulnerability in Best Practical RT allows attackers to inject malicious scripts into search URLs. When users view search results containing crafted parameters, the scri...

CVE-2025-31501

HIGH CVSS 7.2 May 28, 2025

CVE-2025-31501 is a cross-site scripting (XSS) vulnerability in Best Practical RT (Request Tracker) that allows attackers to inject malicious JavaScript via RT permalinks. This affects all RT 5.0 inst...

CVE-2023-45024

HIGH CVSS 7.5 Nov 3, 2023

This vulnerability in Best Practical Request Tracker (RT) allows attackers to access sensitive information through the transaction search feature in the transaction query builder. It affects RT 5 inst...

CVE-2023-41260

HIGH CVSS 7.5 Nov 3, 2023

This vulnerability in Best Practical Request Tracker (RT) exposes sensitive information through responses to mail-gateway REST API calls. Attackers can access potentially confidential data that should...

CVE-2021-38562

HIGH CVSS 7.5 Oct 18, 2021

This vulnerability in Best Practical Request Tracker (RT) allows attackers to perform timing attacks against the REST2 authentication middleware, potentially exposing sensitive information like valid ...