https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T21:10:02.702479+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-38562 CVE-2021-38562 2026-09-30T21:10:03.242332+00:00

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.

 https://vulnerability.circl.lu/vuln/usn-6529-1 USN-6529-1 — request-tracker4 vulnerabilities 2026-09-30T21:10:03.242708+00:00

Affected: Ubuntu:Pro:18.04:LTS: request-tracker4, Ubuntu:20.04:LTS: request-tracker4, Ubuntu:22.04:LTS: request-tracker4

It was discovered that Request Tracker incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. (CVE-2021-38562, CVE-2022-25802, CVE-2023-41259, CVE-2023-41260)