> IT-Sentinel.com

// Cybersecurity & IT News Aggregator - Real-time Threat Intelligence Feed

NEWS CVE
← messages.back_to_articles

> Debian: Request Tracker4 Critical CSV Injection DSA-6032-1 CVE-2025-61873

[SOURCE] LinuxSecurity - Debian [DATE: 22/10/2025 20:50] [LANGUAGE: EN]
It was discovered that Request Tracker, an extensible trouble-ticket tracking system is prone to a CSV injection via ticket values with special characters that are exported to a TSV from search results. For the oldstable distribution (bookworm), this problem has been fixed in version 4.4.6+dfsg-1.1+deb12u3.
[messages.read_original_source] →