Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um einen Denial of Service oder Cross Site Scripting Angriff durchzuführen.
Product
Das Open Ticket Request System (OTRS) ist ein Ticketsystem für Help-Desks.
Vulnerabilities 2
-
High 7.5
XSS in the ticket overview screens
There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any us…
-
Medium 6.5
Possible DoS attack using a special crafted URL in email body
DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.…
Revision history
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Debian Security Advisory DLA-3551 vom 2023-08-31
https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
-
OTRS Security Advisory vom 2021-06-16
https://otrs.com/release-notes/otrs-security-advisory-2021-11/
-
OTRS Security Advisory vom 2021-06-16
https://otrs.com/release-notes/otrs-security-advisory-2021-09/