Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade request-tracker5 | Nov 1, 2023 | Nov 1, 2023 |
| Freebsd | — | Upgrade rt50Upgrade rt44 | Dec 10, 2025 | Oct 18, 2023 |
| Ubuntu | — | Upgrade rt5-standalone (Ubuntu Pro)Upgrade request-tracker5 (Ubuntu Pro)Upgrade request-tracker5Upgrade rt5-fcgi (Ubuntu Pro)Upgrade rt5-standaloneUpgrade rt5-fcgi | Jul 17, 2025 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub