CVE-2022-25803: Medium severity request tracker vulnerability
Published Jul 14, 2022
·Updated
Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.
Affected Software
1 affected component
bestpractical Request Tracker<5.0.3
Remediation
Patch Available
Event History
Jul 14, 2022
CVE Published
via MITRE·11:51 AM
Data Sourced
via MITRE·11:51 AM
Description
Frequently Asked Questions
1
What is CVE-2022-25803?
CVE-2022-25803 is a vulnerability in Best Practical Request Tracker (RT) before 5.0.3 that allows an attacker to perform an open redirect via a ticket search.
2
How severe is CVE-2022-25803?
CVE-2022-25803 has a severity rating of 6.1 (medium).
3
How does CVE-2022-25803 impact Best Practical Request Tracker?
CVE-2022-25803 allows an attacker to manipulate the URL in a ticket search to redirect users to malicious websites.
4
What is the affected version of Best Practical Request Tracker?
The affected version of Best Practical Request Tracker is versions prior to 5.0.3.
5
How can I fix CVE-2022-25803 in Best Practical Request Tracker?
To fix CVE-2022-25803, users should upgrade to version 5.0.3 or higher of Best Practical Request Tracker.