Best Practical RT
Moderate fix1 remedy
cpe:2.3:a:bestpractical:rt:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 6.0.0, < 6.0.3
Request Tracker Cross-Site Request Forgery Vulnerability
Vulnerability
Patched
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Request Tracker (RT) versions 6.0.0 prior to 6.0.3. This vulnerability allows an attacker to induce a logged-in user to visit a malicious web page, which can then trigger arbitrary state-changing actions in RT on behalf of the user.
Impact
Exploitation of this vulnerability allows for Cross-Site Request Forgery, where an attacker can perform actions on behalf of a user without their consent.
Remediation
Users are advised to upgrade to RT version 6.0.3, which addresses this vulnerability.
Added: May 26, 2026, 2:30 PM
Updated: May 26, 2026, 2:30 PM
Vulnerability Rating
Custom Algorithm
spread
1.9impact
0.6exploitability
5.8remediation
7.7relevance
9.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.