CVE-2015-1165: Bestpractical Request Tracker

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors.

Affected products

• Bestpractical Request Tracker: version 3.8.8 only; version 3.8.9 only; version 3.8.10 only; version 3.8.11 only; version 3.8.12 only; version 3.8.13 only; …
• Debian Debian Linux: version 7.0 only
• Fedoraproject Fedora: version 21 only; version 22 only

Published 2015-03-09. Last modified 2026-06-17.