CVE-2022-25803: Medium severity bestpractical Request Tracker vulnerability
Published Jul 14, 2022
·Updated
Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.
Affected Software
5 affected componentsFixes available
bestpractical Request Tracker<5.0.3
debian/request-tracker5<5.0.3+dfsg-1
5.0.3+dfsg-1
debian/request-tracker5<5.0.3+dfsg-1
5.0.3+dfsg-1
debian/request-tracker5<5.0.3+dfsg-1
5.0.3+dfsg-1
debian/request-tracker5
5.0.3+dfsg-3~deb12u65.0.7+dfsg-4+deb13u35.0.10+dfsg-3
Remediation
Patch Available
Event History
Jul 14, 2022
CVE Published
via MITRE·11:51 AM
Data Sourced
via MITRE·11:51 AM
Description
Data Sourced
via OSV·12:15 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2022-25803?
CVE-2022-25803 is a vulnerability in Best Practical Request Tracker (RT) before 5.0.3 that allows an attacker to perform an open redirect via a ticket search.
2
How severe is CVE-2022-25803?
CVE-2022-25803 has a severity rating of 6.1 (medium).
3
How does CVE-2022-25803 impact Best Practical Request Tracker?
CVE-2022-25803 allows an attacker to manipulate the URL in a ticket search to redirect users to malicious websites.
4
What is the affected version of Best Practical Request Tracker?
The affected version of Best Practical Request Tracker is versions prior to 5.0.3.
5
How can I fix CVE-2022-25803 in Best Practical Request Tracker?
To fix CVE-2022-25803, users should upgrade to version 5.0.3 or higher of Best Practical Request Tracker.