CVE-2026-44230

6.1 Moyenne

Publiée le 20/07/2026 à 22:16 · Modifiée le 07/08/2026 à 15:27 · Analysée par le NVD · Source : security-advisories@github.com

Description

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's browser session. This issue has been fixed in versions 5.0.10 and 6.0.3.

Traduire en français

Produits concernés

bestpractical rt
Bestpractical request tracker

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.1 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://github.com/bestpractical/rt/releases/tag/rt-6.0.3 Release Notes
https://github.com/bestpractical/rt/security/advisories/GHSA-p724-v26h-32g9 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories