Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: OTRS ((OTRS)) Community Edition 6.0.x* Clear all filters
TI-2021-14546 CVE-2021-36096 · GHSA-cc6f-j84g-6gmr

Support Bundle includes S/Mime and PGP secret or PIN

Priority LOW 24

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden.

CVSS 3.1MEDIUM 5.2 Network High privileges User interaction EPSS 0.00449 Published 2021-09-06 No fix listed CWE-200
TI-2021-14544 CVE-2021-36094 · GHSA-p79w-9c5j-r2gw

XSS attack in appointment edit popup screen

Priority LOW 26

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.0059 Published 2021-09-06 No fix listed CWE-79
TI-2021-14543 CVE-2021-36093 · GHSA-p8h5-xqwr-ww86

DoS attack using PostMaster filters

Priority LOW 26

It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01108 Published 2021-09-06 No fix listed CWE-185