Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: OTRS 7.0.45, 8.0.35 Clear all filters
TI-2023-19484 CVE-2023-38060 · GHSA-9fvp-3hg9-xrcv

Host header injection by attachments in web service

Priority LOW 39

Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations of the OTRS Generic Interface modules allows any authenticated attacker to to perform an hos…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00683 Published 2023-07-24 Fixed in 7.0.45, 8.0.35 CWE-20
TI-2023-19480 CVE-2023-38056 · GHSA-236v-xxhj-r9jw

Code execution via System Configuration

Priority LOW 35

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00872 Published 2023-07-24 Fixed in 7.0.45, 8.0.35 CWE-78