Alpine/rt4: medium 6.1

Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment.

Action: Upgrade rt4 to 4.4.7-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-25802
• https://security.alpinelinux.org/vuln/CVE-2022-25802

published 2022-07-14T12:15:11.507Z · modified 2026-11-03T07:31:22.566029743Z · JSON