Summary
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder um Code auszuführen.
Product
Das Open Ticket Request System (OTRS) ist ein Ticketsystem für Help-Desks.
Vulnerabilities 2
-
High 7.4
Code execution through ACL creation
Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Edition (ACL modules) allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments a…
-
Medium 6.1
Possible XSS in Ticket Actions
Improper Input Validation vulnerability in OTRS AG OTRS (Ticket Actions modules), OTRS AG ((OTRS)) Community Edition (Ticket Actions modules) allows Cross-Site Scripting (XSS).This issue affects OTRS: from 7.0.X before 7.0.42; ((OTRS)) Community Edition: from…
Revision history
-
#1
Initiale Fassung
References
-
OTRS Security Advisory vom 2023-03-20
https://otrs.com/release-notes/otrs-security-advisory-2023-02
-
OTRS Security Advisory vom 2023-03-20
https://otrs.com/release-notes/otrs-security-advisory-2023-01
-
OTRS Security Advisory vom 2023-03-20
https://otrs.com/overview-release-notes-security-advisories/security-advisories/