Bestpractical vulnerabilities
We track 4 vulnerabilities in Bestpractical products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
Latest Bestpractical vulnerabilities
- 9.1 Critical severity
rt: Exposure of Sensitive Information to an Unauthorized Actor
RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to 6.0.3 contain an information disclosure and privilege escalation vulnerability in the REST 2.0 API. A privileged (non-administrative) u
- 8.1 High severity
rt: Improper Authentication
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 through 6.0.2 contain an authentication bypass vulnerability in RT installations that use LDAP/AD for user authentication. Under certain LDAP
- 8.8 High severity
rt: Improper Neutralization of Special Elements used in an SQL Command
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without prope
- 7.1 High severity
rt: Cross-Site Request Forgery
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 through 6.0.2 contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker who can induce a logged-in RT user to visit a malicious web page can trigger arbitrary