Critical Vulnerability in Request Tracker 5: CVE-2025-9158 Exposes Security Risks
Summary
DEBIAN-CVE-2025-9158: ... Affects request-tracker5 versions < 5.0.7+dfsg-4+deb13u1. Fixed in 5.0.7+dfsg-4+deb13u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Request Tracker 5 is a widely-used issue tracking system that helps organizations manage tasks, track issues, and streamline workflows. It is known for its flexibility and extensibility, allowing users to customize workflows and integrate with other tools. However, like many software packages, it can be susceptible to vulnerabilities that may compromise its integrity and the security of the data it manages.
Vulnerability Detail
CVE-2025-9158 is a security vulnerability identified in Request Tracker 5, which affects versions prior to 5.0.7+dfsg-4+deb13u1 in Debian 13. This vulnerability could potentially allow unauthorized access or manipulation of data within the system, posing significant risks to organizations relying on this software for task management. The vulnerability originates from a flaw in the code that fails to properly validate user inputs, leading to possible exploitation by malicious actors.
How To Fix
Minimum fixed version
5.0.7+dfsg-4+deb13u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade request-tracker5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the Request Tracker application by implementing stricter firewall rules or limiting user permissions until the package is updated to a secure version.
Conclusion
In summary, CVE-2025-9158 is a critical vulnerability affecting Request Tracker 5 that requires immediate attention. Users are urged to update their installations to the patched version to mitigate potential security risks. For those unable to update right away, implementing temporary workarounds can help protect sensitive data.
See every vulnerability recorded for request-tracker5 →
FAQ
CVE-2025-9158 is a security vulnerability in Request Tracker 5 that may allow unauthorized access to sensitive data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, consider implementing stricter access controls or firewall rules as a temporary workaround.
More information about Request Tracker 5 can be found on its official website and documentation pages.
Yes, there is a risk of data loss or unauthorized data manipulation if the vulnerability is exploited by malicious actors.
References
Related vulnerabilities
Recent vulnerabilities recorded for request-tracker5.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
