TI-2021-04536 CVE-2021-21438 · GHSA-vxww-8wxj-j946
FAQ articles are shown to users without permission
Priority LOW 21
Agents are able to see linked FAQ articles without permissions (defined in FAQ Category).
Vulnerabilities
4 records
TI-2013-02322 CVE-2013-2637 · GHSA-6cx5-8j63-3v47
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and…
Priority LOW 34
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user exe…
TI-2013-02311 CVE-2013-2625 · GHSA-87rp-gwq4-fx5h
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS…
Priority LOW 31
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8.
TI-2016-05069 CVE-2016-5843 · GHSA-9gq7-7qp9-2c82
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before…
Priority MEDIUM 46
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted…