Skip to content
OpenAdvisories

Package · Debian

request-tracker5

21 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint

    RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to 6.0.3 contain an information disclosure and privilege escalation vulnerability in the REST 2.0 API. A privileged (non-administrative) …