Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: OTRS AG Component: Survey Clear all filters
TI-2023-19481 CVE-2023-38057 · GHSA-48q8-4r5f-p5pf

XSS stored in survey answers

Priority LOW 25

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00382 Published 2023-07-24 Fixed in 7.0.32, 8.0.13 CWE-20
TI-2021-04532 CVE-2021-21434 · GHSA-2rff-cr3q-94jm

XSS in Survey Module

Priority LOW 23

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00668 Published 2021-02-08 No fix listed CWE-79