Fluid Attacks Database

Description

Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	request-tracker5	=5.0.3+dfsg-2 \|\| =5.0.3+dfsg-3~deb12u1 \|\| >=0 <5.0.3+dfsg-3~deb12u2	5.0.3+dfsg-3~deb12u2
debian 13	request-tracker5	>=0 <5.0.5+dfsg-1	5.0.5+dfsg-1
debian 14	request-tracker5	>=0 <5.0.5+dfsg-1	5.0.5+dfsg-1

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.