Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in OTRS ausnutzen, um beliebigen Programmcode auszuführen.
Product
Das Open Ticket Request System (OTRS) ist ein Ticketsystem für Help-Desks.
Vulnerabilities 1
-
Medium 6.3
Upload of files outside application directory
The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading t…
Revision history
-
#1
Initiale Fassung
References
-
OTRS Security Advisory 2024-05 vom 2024-06-02
https://otrs.com/release-notes/otrs-security-advisory-2024-05/