It was discovered that Request Tracker, an extensible trouble-ticket tracking system is prone to a CSV injection via ticket values with special characters that are exported to a TSV from search results.
https://security-tracker.debian.org/tracker/DSA-6032-1
Continue reading...
https://security-tracker.debian.org/tracker/DSA-6032-1
Continue reading...

