critical9.1
CVE-2022-25800
Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.
Impact
Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestpractical | Request Tracker For Incident Response | before 4.0.3 from 5.0.0 before 5.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.bestpractical.com/release-notes/rtir/4.0.3
- https://docs.bestpractical.com/release-notes/rtir/5.0.3
- https://docs.bestpractical.com/release-notes/rtir/index.html
- https://docs.bestpractical.com/release-notes/rtir/4.0.3
- https://docs.bestpractical.com/release-notes/rtir/5.0.3
- https://docs.bestpractical.com/release-notes/rtir/index.html