CVE-2025-31501: XSS
Published May 28, 2025
·Updated
Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.
Affected Software
3 affected components
Best Practical RT>=5.0<=5.0.7
bestpractical Request Tracker>=4.4.0<4.4.8
bestpractical Request Tracker>=5.0.0<5.0.8
Event History
May 28, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-31501?
CVE-2025-31501 has been classified as a high severity vulnerability due to its potential for Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2025-31501?
To fix CVE-2025-31501, upgrade to Best Practical RT version 5.0.8 or later, where the vulnerability is addressed.
3
What software versions are affected by CVE-2025-31501?
CVE-2025-31501 affects Best Practical RT versions 5.0 through 5.0.7.
4
What type of attack does CVE-2025-31501 allow?
CVE-2025-31501 allows attackers to perform Cross-Site Scripting (XSS) attacks via JavaScript injection in RT permalinks.
5
Is CVE-2025-31501 easy to exploit?
Yes, CVE-2025-31501 can be easily exploited by attackers if users visit a maliciously crafted permalink.