CVE-2022-25803
MEDIUMRequest Tracker < 5.0.3 - Open Redirect via Ticket Search
Title source: llmDescription
Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.
References (2)
Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://docs.bestpractical.com/release-notes/rt/index.html
Patch, Release Notes, Vendor Advisory x_refsource_confirm
https://docs.bestpractical.com/release-notes/rt/5.0.3
Scores
CVSS v3
6.1
EPSS
0.0044
EPSS Percentile
35.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-601
Status
published
Products (1)
bestpractical/request_tracker
< 5.0.3
Published
Jul 14, 2022
Tracked Since
Feb 18, 2026