CVE-2025-61873

CVSS Score & Metrics

Base Score

2.6 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N                                    

Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.

Published Date

January 16, 2026

Last Modified

January 16, 2026

CWE ID

CWE-1236

Source

NVD

Vendor

bestpractical

Product

Request Tracker