CPE Details
Best Practical Request Tracker 5.0.4
5.0.4
2025-06-09
16h56 +00:00
16h56 +00:00
2025-06-09
16h56 +00:00
16h56 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:bestpractical:request_tracker:5.0.4:*:*:*:*:*:*:*
Informations
Vendor
bestpracticalProduct
request_trackerVersion
5.0.4Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL. | 7.2 |
High |
||
| Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name. | 7.2 |
High |
||
| Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink. | 7.2 |
High |
||
| Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call. | 7.5 |
High |
||
| Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls. | 7.5 |
High |
||
| Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder. | 7.5 |
High |
