Advisories · Technology
bestpractical rt.
Every CVE that names bestpractical rt among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
RT: Reflected Cross-Site Scripting in search results chart
- bestpractical rt
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint
- bestpractical rt
- Information disclosure
- Privilege escalation
- CVSS 5.4 Medium
RT: Cross-Site Scripting via inline-served uploaded content
- bestpractical rt
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
RT: Stored Cross-Site Scripting via insufficient template escaping
- bestpractical rt
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
RT: Reflected Cross-Site Scripting via URL parameters
- bestpractical rt
- Cross-site scripting (XSS)
- CVSS 8.1 High
RT: LDAP authentication bypass via empty password
- bestpractical rt
- Authentication bypass
- CVSS 8.8 High
RT: SQL injection via entry_aggregator parameter in JSON search
- bestpractical rt
- SQL injection
- CVSS 7.1 High
RT has broken CSRF protection for authenticated users
- bestpractical rt
- Cross-site request forgery (CSRF)
- CVSS 4.6 Medium
RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps
- bestpractical rt
- Other injection
- CVSS 7.2 High
Cross-site scripting in bestpractical RT
- bestpractical RT
- Cross-site scripting (XSS)
- CVSS 7.2 High
Cross-site scripting in bestpractical RT
- bestpractical RT
- Cross-site scripting (XSS)
- CVSS 7.2 High
Cross-site scripting in bestpractical RT
- bestpractical RT
- Cross-site scripting (XSS)