CVE-2022-25803
First published: Thu Jul 14 2022(Updated: )
Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bestpractical Request Tracker | <5.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-25803?
CVE-2022-25803 is a vulnerability in Best Practical Request Tracker (RT) before 5.0.3 that allows an attacker to perform an open redirect via a ticket search.
How severe is CVE-2022-25803?
CVE-2022-25803 has a severity rating of 6.1 (medium).
How does CVE-2022-25803 impact Best Practical Request Tracker?
CVE-2022-25803 allows an attacker to manipulate the URL in a ticket search to redirect users to malicious websites.
What is the affected version of Best Practical Request Tracker?
The affected version of Best Practical Request Tracker is versions prior to 5.0.3.
How can I fix CVE-2022-25803 in Best Practical Request Tracker?
To fix CVE-2022-25803, users should upgrade to version 5.0.3 or higher of Best Practical Request Tracker.
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/bestpractical
- canonical/bestpractical request tracker