PT-2022-17529 · Best Practical+2 · Request Tracker+2

Published 2022-07-14 · Updated 2025-08-13 · CVE-2022-25803

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Best Practical Request Tracker (RT) versions prior to 5.0.3

Description The issue is an Open Redirect that occurs via a ticket search. This means that an attacker could potentially redirect users to unintended locations, which could lead to phishing attacks or other malicious activities.

Recommendations For versions prior to 5.0.3, update to version 5.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the ticket search functionality until the update can be applied.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-25803

USN-7692-1

Affected Products

Linuxmint

Request Tracker

Ubuntu

References · 22

• https://ubuntu.com/security/CVE-2023-41260 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-25803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2545 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-31500 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25803 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-25803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-25802 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-25803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30087 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-25803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-3262 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-25803 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7692-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-25803 · Security Note
• https://docs.bestpractical.com/release-notes/rt/index.html · Vendor Advisory