> Debian: Request Tracker5 Moderate CSV Injection, XSS DSA-6031-1
[DATE: 22/10/2025 20:43]
[LANGUAGE: EN]
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result in CSV injection via ticket values with special characters, or cross-site scripting via calendar invitations added to a ticket. For the oldstable distribution (bookworm), these problems have been