CVE-2024-3262mediumCWE-200

CVE-2024-3262: medium-severity vulnerability in Best Practical Solutions Request Tracker

Information exposure vulnerability in Request Tracker (RT)

Published · Updated

Follow this CVE+ Monitor Request Tracker+ Monitor request-tracker4

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.3%
Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser cache, leading to information exposure despite session termination.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Best Practical Solutions · Request Tracker
Related CVEs — Best Practical Solutions Request Tracker

In the same product, most dangerous first.

CVE-2026-105454MEDIUMStored XSS via crafted URLs in HTML ticket content in Request TrackerEPSS 0.4%CVE-2025-2545LOWDeprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIMEEPSS 0.2%