Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.
{ "urgency": "not yet assigned" }