CVE-2025-61873
Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.
Published: 2026-01-16 · CVSS: 2.6 · CVSS 3.1
Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7