Skip to content
CVE PROGRAM SOURCE RECORD2.6 Low

CVE-2025-61873

Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.

Description

Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

bestpractical Request Tracker

Default version status: unaffected

  • 0 to < 4.4.9affected
  • 5.0 to < 5.0.9affected
  • 6.0 to < 6.0.2affected

References