Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.
{ "binaries": [ { "binary_name": "request-tracker5", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" }, { "binary_name": "rt5-apache2", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" }, { "binary_name": "rt5-clients", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" }, { "binary_name": "rt5-db-mysql", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" }, { "binary_name": "rt5-db-postgresql", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" }, { "binary_name": "rt5-db-sqlite", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" }, { "binary_name": "rt5-doc-html", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" }, { "binary_name": "rt5-fcgi", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" }, { "binary_name": "rt5-standalone", "binary_version": "5.0.1+dfsg-1ubuntu1+esm1" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }