Skip to content
OpenAdvisories

Package · Ubuntu

request-tracker4

38 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-44231

    RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint

    RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to 6.0.3 contain an information disclosure and privilege escalation vulnerability in the REST 2.0 API. A privileged (non-administrative) …

    bestpractical rt request-tracker4 request-tracker4 Debian Ubuntu
  • Critical 9.1
    CVE-2023-22457 EPSS 19%

    org.xwiki.contrib:application-ckeditor-ui vulnerable to Remote Code Execution via Cross-Site Request Forgery

    CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document lacked a protection against Cross-Site Request Forgery (CSRF), allowing to execute macros with the rights of the curren…

    xwiki-contrib application-ckeditor request-tracker4 ldap-account-manager Ubuntu Maven