Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.Referenceshttps://docs.bestpractical.com/release-notes/rt/index.htmlhttps://docs.bestpractical.com/release-notes/rt/5.0.3
