Fluid Attacks Database

Description

Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	request-tracker4	=4.4.4+dfsg-2 \|\| =4.4.4+dfsg-2+deb11u1 \|\| =4.4.4+dfsg-2+deb11u2 \|\| =4.4.4+dfsg-2+deb11u3 \|\| >=0 <4.4.4+dfsg-2+deb11u4	4.4.4+dfsg-2+deb11u4
debian 12	request-tracker4	=4.4.6+dfsg-1.1 \|\| =4.4.6+dfsg-1.1+deb12u1 \|\| >=0 <4.4.6+dfsg-1.1+deb12u2	4.4.6+dfsg-1.1+deb12u2
debian 12	request-tracker5	=5.0.3+dfsg-2 \|\| =5.0.3+dfsg-3~deb12u1 \|\| =5.0.3+dfsg-3~deb12u2 \|\| >=0 <5.0.3+dfsg-3~deb12u3	5.0.3+dfsg-3~deb12u3
debian 13	request-tracker5	>=0 <5.0.7+dfsg-3	5.0.7+dfsg-3
debian 14	request-tracker5	>=0 <5.0.7+dfsg-3	5.0.7+dfsg-3

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.