Skip to content
OpenAdvisories

Package · Debian

otrs2

93 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-21441

    XSS in the ticket overview screens

    There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any us…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  • High 7.3
    CVE-2020-1773

    Session / Password / Password token leak

    An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu