Description (CNA)
Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| bestpractical / Request Tracker | affected 0 before 4.4.9; affected 5.0 before 5.0.9; affected 6.0 before 6.0.2 |
CWE
CWE-1236
References
ADP enrichment
No English description supplied.
No references supplied.