CVE-2023-45024
HIGH EPSS 44.0%
Published Nov 3, 20232y ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
Published Nov 3, 2023 2y ago
Last Modified Jun 17, 2026 2w ago
Description
Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None
Threat Intelligence
EPSS Exploit Probability
44.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| bestpractical | request_tracker | * | ≥5.0.0 – <5.0.5 |
References 2
- docs.bestpractical.com https://docs.bestpractical.com/release-notes/rt/5.0.5
- docs.bestpractical.com https://docs.bestpractical.com/release-notes/rt/index.html
Remediation
- docs.bestpractical.com https://docs.bestpractical.com/release-notes/rt/5.0.5