otrs2

8 results · Clear filters · Feed

• Medium 6.1
  CVE-2018-17883

  An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker could send an e-mail mess…

  otrs2 otrs2 Debian Ubuntu
  Apr 15, 2023
• Medium 6.4
  CVE-2021-36100

  Authenticated remote code execution

  Specially crafted string in OTRS system configuration can allow the execution of any system command.

  OTRS OTRS ((OTRS)) Community Edition OTRSSTORM Debian Ubuntu
  Mar 21, 2022
• Medium 5.2
  CVE-2021-21440

  Support Bundle includes S/Mime and PGP keys

  Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x versi…

  OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  Jul 26, 2021
• Medium 6.5
  CVE-2021-21439

  Possible DoS attack using a special crafted URL in email body

  DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.…

  OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  Jun 14, 2021
• Medium 4.5
  CVE-2020-1774

  Information disclosure

  When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects ((OTRS)) Community Edition: …

  OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  Apr 28, 2020
• Medium 4.6
  CVE-2020-1771

  Possible XSS in Customer user address book

  Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript). When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: ((OTRS)) Community Edition: 6.0.2…

  OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  Mar 27, 2020
• Medium 6.5
  CVE-2020-1772

  Information Disclosure

  It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue affects: ((OTRS)) Community Edition 5.0.41 and prior versio…

  OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  Mar 27, 2020
• Medium 5.3
  CVE-2019-18180

  Denial of service

  Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g. attaching files to mails) of ((OTRS)) Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG…

  otrs2 otrs2 Debian Ubuntu
  Dec 5, 2019