23 matches found
CVE-2026-105455
RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject without HTML escaping. A ticket subject containing script runs it when a user opens either form. RTIR grants everyone the right to create...
CVE-2026-105456
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
CVE-2026-105455 Stored XSS via related ticket subject on RTIR Split and Create Incident forms
RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject without HTML escaping. A ticket subject containing script runs it when a user opens either form. RTIR grants everyone the right to create...
CVE-2026-105455
The RTIR ticket creation forms are vulnerable to Stored XSS because they render the subject of a related ticket without HTML escaping when splitting a ticket or creating an incident from a report. An unauthenticated sender can provide a malicious script via an emailed report's subject. When an in...
CVE-2026-105455 Stored XSS via related ticket subject on RTIR Split and Create Incident forms
RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject without HTML escaping. A ticket subject containing script runs it when a user opens either form. RTIR grants everyone the right to create...
EUVD-2026-114130
RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject without HTML escaping. A ticket subject containing script runs it when a user opens either form. RTIR grants everyone the right to create...
CVE-2026-105456 Stored XSS via HTML scrubber rule in RTIR
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
CVE-2026-105456
The RTIR extension for Request Tracker (RT) introduces a Stored XSS vulnerability due to a flawed HTML scrubber rule. The extension allows internal link placeholders but incorrectly permits any link containing that placeholder, including those using the javascript: scheme. This change affects the...
CVE-2026-105456 Stored XSS via HTML scrubber rule in RTIR
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
EUVD-2026-114128
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
PT-2026-133623
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
PT-2026-133661
RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject without HTML escaping. A ticket subject containing script runs it when a user opens either form. RTIR grants everyone the right to create...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25801
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25801
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...
Server side request forgery (ssrf)
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25801
Vulnerability : CVE-2022-25801 affects Best Practical RT for Incident Response (RTIR). Affected versions are RTIR < 4.0.3 and RTIR 5.x
CVE-2022-25800
The vulnerability CVE-2022-25800 affects Best Practical RT for Incident Response (RTIR). Affected are RTIR versions before 4.0.3 and RTIR 5.x before 5.0.3, where the whois lookup tool is exploitable to perform server-side requests (SSRF). According to the initial details, the impact is high on co...