Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: OTRS ((OTRS)) Community Edition 6.0.x* Clear all filters
TI-2022-18443 CVE-2022-39051 · GHSA-82r4-fhr7-r9f8

Perl Code execution in Template Toolkit

Priority MEDIUM 40

Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party package

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00826 Published 2022-09-05 No fix listed CWE-913
TI-2022-18442 CVE-2022-39050 · GHSA-x46q-hjvj-45vc

Possible XSS stored in customer information

Priority LOW 23

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00555 Published 2022-09-05 No fix listed CWE-79
TI-2022-18441 CVE-2022-39049 · GHSA-vcr2-2xwg-6gr9

Possible XSS in Admin Interface

Priority LOW 23

An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00658 Published 2022-09-05 No fix listed CWE-79