Skip to content
OpenAdvisories

Package · Debian

znuny

21 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-48188 Public exploit

    SQL Injection via MySQL Quote Method

    An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is config…

  • Medium 6.1
    CVE-2025-52204 Public exploit

    A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomer…