Request Tracker

2 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-105454

  Stored XSS via crafted URLs in HTML ticket content in Request Tracker

  RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link's address can add a script that runs when the ticket history is displayed, with no further action by the vi…

  Best Practical Solutions Request Tracker request-tracker5 request-tracker5 Debian Ubuntu
  Oct 30, 2026
• Medium 5.5
  CVE-2024-3262

  Information exposure vulnerability in Request Tracker (RT)

  Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application st…

  Best Practical Solutions Request Tracker request-tracker4 request-tracker4 Debian Ubuntu
  Apr 4, 2024