Best Practical Request Tracker Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Best Practical Request Tracker. This issue arises in versions 5.0.4 prior to 5.0.10 and 6.0.0 prior to 6.0.3. The vulnerability is triggered through the 'Page' parameter in GET requests, allowing attackers to execute arbitrary JavaScript in the victim's browser.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious scripts in the context of the user's browser.

Remediation

Users of Request Tracker 6.0.3 should apply a specific patch available in the upcoming 6.0.4 release to address this vulnerability. Request Tracker 5.0.10 users can upgrade to the latest version.