CVE-2022-25801: Bestpractical Request Tracker For Incident Response

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools.

Affected products

• Bestpractical Request Tracker For Incident Response: before 4.0.3 (fixed in 4.0.3); from 5.0.0, before 5.0.3 (fixed in 5.0.3)

Published 2022-07-14. Last modified 2026-06-17.