What is CVE-2025-61873?

CVE-2025-61873 is a low-severity vulnerability in Bestpractical Request Tracker, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 2.6/10. Published 2026-01-16.

How severe is CVE-2025-61873?

Low severity. CVSS v3 base score is 2.6 out of 10.

Vulnerability in Bestpractical Request Tracker

CVE-2025-61873

Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used.

EPSS: 0.002 (9.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N.

Affected products

Bestpractical Request Tracker — versions 0, 5.0, 6.0

Weakness classification (CWE)

CWE-1236 — Improper Neutralization of Formula Elements in a CSV File

References

cve@mitre.org

Frequently asked questions

What is CVE-2025-61873?: CVE-2025-61873 is a low-severity vulnerability in Bestpractical Request Tracker, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 2.6/10. Published 2026-01-16.
How severe is CVE-2025-61873?: Low severity. CVSS v3 base score is 2.6 out of 10.