Vulnerabilities > CVE-2022-25800 - Server-Side Request Forgery (SSRF) vulnerability in Bestpractical Request Tracker for Incident Response

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

critical

NVD

Published: 2022-07-14

Updated: 2022-07-21

Summary

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.

Part	Description	Count
Application	Bestpractical Bestpractical Request Tracker FOR Incident Response 5.0.0 Bestpractical Request Tracker FOR Incident Response 5.0.1 Bestpractical Request Tracker FOR Incident Response 2.4.0 Bestpractical Request Tracker FOR Incident Response 2.4.1 Bestpractical Request Tracker FOR Incident Response 2.4.2 Bestpractical Request Tracker FOR Incident Response 2.4.3 Bestpractical Request Tracker FOR Incident Response 2.4.4 Bestpractical Request Tracker FOR Incident Response 2.4.5 Bestpractical Request Tracker FOR Incident Response 2.6.0 Bestpractical Request Tracker FOR Incident Response 2.6.1 Bestpractical Request Tracker FOR Incident Response 3.0.0 Bestpractical Request Tracker FOR Incident Response 3.0.1 Bestpractical Request Tracker FOR Incident Response 3.0.2 Bestpractical Request Tracker FOR Incident Response 3.0.3 Bestpractical Request Tracker FOR Incident Response 3.0.4 Bestpractical Request Tracker FOR Incident Response 3.2.0 Bestpractical Request Tracker FOR Incident Response 3.2.1 Bestpractical Request Tracker FOR Incident Response 4.0.0 Bestpractical Request Tracker FOR Incident Response 4.0.1 Bestpractical Request Tracker FOR Incident Response 4.0.2	20