Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.
References
| Link | Resource |
|---|---|
| https://docs.bestpractical.com/release-notes/rtir/4.0.3 | Patch Release Notes Vendor Advisory |
| https://docs.bestpractical.com/release-notes/rtir/5.0.3 | Patch Release Notes Vendor Advisory |
| https://docs.bestpractical.com/release-notes/rtir/index.html | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Jul 2022, 18:54
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
| First Time |
Bestpractical request Tracker For Incident Response
Bestpractical |
|
| CPE | cpe:2.3:a:bestpractical:request_tracker_for_incident_response:*:*:*:*:*:*:*:* | |
| CWE | CWE-918 | |
| References | (MISC) https://docs.bestpractical.com/release-notes/rtir/index.html - Release Notes, Vendor Advisory | |
| References | (CONFIRM) https://docs.bestpractical.com/release-notes/rtir/5.0.3 - Patch, Release Notes, Vendor Advisory | |
| References | (CONFIRM) https://docs.bestpractical.com/release-notes/rtir/4.0.3 - Patch, Release Notes, Vendor Advisory |
14 Jul 2022, 12:41
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-14 12:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-25800
Mitre link : CVE-2022-25800
CVE.ORG link : CVE-2022-25800
JSON object : View
Products Affected
bestpractical
- request_tracker_for_incident_response
CWE
CWE-918
Server-Side Request Forgery (SSRF)