Read the docs
TI-2010-04491 Aliases CVE-2010-4768GHSA-gh7q-c68r-vp9c

Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden…

Priority LOW 29CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remove operations involving both hidden permissions and other permissions.

Why it matters now

EPSS 0.00972 62nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 80

CPEVersionsRoleVendor
cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*up to 2.3.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:0.5:beta1:*:*:*:*:*:*0.5 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:0.5:beta2:*:*:*:*:*:*0.5 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:0.5:beta3:*:*:*:*:*:*0.5 beta3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:0.5:beta4:*:*:*:*:*:*0.5 beta4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:0.5:beta5:*:*:*:*:*:*0.5 beta5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:0.5:beta6:*:*:*:*:*:*0.5 beta6VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:0.5:beta7:*:*:*:*:*:*0.5 beta7VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:0.5:beta8:*:*:*:*:*:*0.5 beta8VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.0:rc1:*:*:*:*:*:*1.0 rc1VulnerableOTRS AG
  • cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:* Versions up to 2.3.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:0.5:beta1:*:*:*:*:*:* Versions 0.5 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:0.5:beta2:*:*:*:*:*:* Versions 0.5 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:0.5:beta3:*:*:*:*:*:* Versions 0.5 beta3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:0.5:beta4:*:*:*:*:*:* Versions 0.5 beta4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:0.5:beta5:*:*:*:*:*:* Versions 0.5 beta5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:0.5:beta6:*:*:*:*:*:* Versions 0.5 beta6 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:0.5:beta7:*:*:*:*:*:* Versions 0.5 beta7 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:0.5:beta8:*:*:*:*:*:* Versions 0.5 beta8 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.0:rc1:*:*:*:*:*:* Versions 1.0 rc1 Vulnerable ·OTRS AG
Show 70 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:otrs:otrs:1.0:rc2:*:*:*:*:*:*1.0 rc2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.0:rc3:*:*:*:*:*:*1.0 rc3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.1:rc1:*:*:*:*:*:*1.1 rc1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.1.0:rc1:*:*:*:*:*:*1.1.0 rc1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.1.0:rc2:*:*:*:*:*:*1.1.0 rc2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.1.2:*:*:*:*:*:*:*1.1.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.1.3:*:*:*:*:*:*:*1.1.3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.1.4:*:*:*:*:*:*:*1.1.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.2.0:beta1:*:*:*:*:*:*1.2.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.2.0:beta2:*:*:*:*:*:*1.2.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.2.0:beta3:*:*:*:*:*:*1.2.0 beta3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.2.3:*:*:*:*:*:*:*1.2.3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.2.4:*:*:*:*:*:*:*1.2.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.3.0:beta1:*:*:*:*:*:*1.3.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.3.0:beta2:*:*:*:*:*:*1.3.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.3.0:beta3:*:*:*:*:*:*1.3.0 beta3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.3.0:beta4:*:*:*:*:*:*1.3.0 beta4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*1.3.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:1.3.3:*:*:*:*:*:*:*1.3.3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.0:beta1:*:*:*:*:*:*2.0.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.0:beta2:*:*:*:*:*:*2.0.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.0:beta4:*:*:*:*:*:*2.0.0 beta4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.0:beta5:*:*:*:*:*:*2.0.0 beta5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.0:beta6:*:*:*:*:*:*2.0.0 beta6VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*2.0.3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.0.5:*:*:*:*:*:*:*2.0.5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.0:beta1:*:*:*:*:*:*2.1.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.0:beta2:*:*:*:*:*:*2.1.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.1:*:*:*:*:*:*:*2.1.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.2:*:*:*:*:*:*:*2.1.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.3:*:*:*:*:*:*:*2.1.3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.4:*:*:*:*:*:*:*2.1.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.5:*:*:*:*:*:*:*2.1.5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.6:*:*:*:*:*:*:*2.1.6VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.7:*:*:*:*:*:*:*2.1.7VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.8:*:*:*:*:*:*:*2.1.8VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.1.9:*:*:*:*:*:*:*2.1.9VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.0:beta1:*:*:*:*:*:*2.2.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.0:beta2:*:*:*:*:*:*2.2.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.0:beta3:*:*:*:*:*:*2.2.0 beta3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.0:beta4:*:*:*:*:*:*2.2.0 beta4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.0:rc1:*:*:*:*:*:*2.2.0 rc1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.2:*:*:*:*:*:*:*2.2.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.3:*:*:*:*:*:*:*2.2.3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.4:*:*:*:*:*:*:*2.2.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.5:*:*:*:*:*:*:*2.2.5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.6:*:*:*:*:*:*:*2.2.6VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.7:*:*:*:*:*:*:*2.2.7VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.8:*:*:*:*:*:*:*2.2.8VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.2.9:*:*:*:*:*:*:*2.2.9VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.3.0:beta1:*:*:*:*:*:*2.3.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.3.0:beta2:*:*:*:*:*:*2.3.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.3.0:beta3:*:*:*:*:*:*2.3.0 beta3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.3.0:beta4:*:*:*:*:*:*2.3.0 beta4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.3.0:rc1:*:*:*:*:*:*2.3.0 rc1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.3.1:*:*:*:*:*:*:*2.3.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.3.2:*:*:*:*:*:*:*2.3.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:2.3.3:*:*:*:*:*:*:*2.3.3VulnerableOTRS AG
  • cpe:2.3:a:otrs:otrs:1.0:rc2:*:*:*:*:*:* Versions 1.0 rc2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.0:rc3:*:*:*:*:*:* Versions 1.0 rc3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.1:rc1:*:*:*:*:*:* Versions 1.1 rc1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.1.0:rc1:*:*:*:*:*:* Versions 1.1.0 rc1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.1.0:rc2:*:*:*:*:*:* Versions 1.1.0 rc2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.2.0:beta1:*:*:*:*:*:* Versions 1.2.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.2.0:beta2:*:*:*:*:*:* Versions 1.2.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.2.0:beta3:*:*:*:*:*:* Versions 1.2.0 beta3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.3.0:beta1:*:*:*:*:*:* Versions 1.3.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.3.0:beta2:*:*:*:*:*:* Versions 1.3.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.3.0:beta3:*:*:*:*:*:* Versions 1.3.0 beta3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.3.0:beta4:*:*:*:*:*:* Versions 1.3.0 beta4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.0:beta1:*:*:*:*:*:* Versions 2.0.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.0:beta2:*:*:*:*:*:* Versions 2.0.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.0:beta4:*:*:*:*:*:* Versions 2.0.0 beta4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.0:beta5:*:*:*:*:*:* Versions 2.0.0 beta5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.0:beta6:*:*:*:*:*:* Versions 2.0.0 beta6 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.0:beta1:*:*:*:*:*:* Versions 2.1.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.0:beta2:*:*:*:*:*:* Versions 2.1.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.4:*:*:*:*:*:*:* Versions 2.1.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.5:*:*:*:*:*:*:* Versions 2.1.5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.6:*:*:*:*:*:*:* Versions 2.1.6 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.7:*:*:*:*:*:*:* Versions 2.1.7 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.8:*:*:*:*:*:*:* Versions 2.1.8 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.1.9:*:*:*:*:*:*:* Versions 2.1.9 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.0:beta1:*:*:*:*:*:* Versions 2.2.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.0:beta2:*:*:*:*:*:* Versions 2.2.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.0:beta3:*:*:*:*:*:* Versions 2.2.0 beta3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.0:beta4:*:*:*:*:*:* Versions 2.2.0 beta4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.0:rc1:*:*:*:*:*:* Versions 2.2.0 rc1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.6:*:*:*:*:*:*:* Versions 2.2.6 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.7:*:*:*:*:*:*:* Versions 2.2.7 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.8:*:*:*:*:*:*:* Versions 2.2.8 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.2.9:*:*:*:*:*:*:* Versions 2.2.9 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.3.0:beta1:*:*:*:*:*:* Versions 2.3.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.3.0:beta2:*:*:*:*:*:* Versions 2.3.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.3.0:beta3:*:*:*:*:*:* Versions 2.3.0 beta3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.3.0:beta4:*:*:*:*:*:* Versions 2.3.0 beta4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.3.0:rc1:*:*:*:*:*:* Versions 2.3.0 rc1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:2.3.3:*:*:*:*:*:*:* Versions 2.3.3 Vulnerable ·OTRS AG

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-4768
  2. 2026-10-03 Alias added: GHSA-gh7q-c68r-vp9c

References

Exploit 1

Other 1

  • TI-2017-12458 In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS… CVSS 3.0HIGH 8.8
  • TI-2026-35608 SQL Injection via MySQL Quote Method CVSS 3.1CRITICAL 9.1
  • TI-2023-04991 SSL Certificates are not checked for E-Mail Handling CVSS 3.1CRITICAL 9.1
  • TI-2022-04045 SQL Injection via OTRS Search API CVSS 3.1CRITICAL 9.8
  • TI-2017-12258 Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5… CVSS 3.0HIGH 8.8
  • TI-2017-06753 In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x… CVSS 3.0HIGH 8.8
See all 141 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences