Skip to content
OpenAdvisories

Package · Ubuntu

znuny

50 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.5
    CVE-2024-23790

    Missing file type check in avatar picture upload

    Improper Input Validation vulnerability in the upload functionality for user avatars allows functionality misuse due to missing check of filetypes. This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023 through 2023.1.1.

    OTRS OTRS otrs2 znuny Ubuntu
  • Low 3.5
    CVE-2023-5421

    Possible XSS execution in customer information

    An attacker who is logged into OTRS as an user with privileges to create and change customer user data may manipulate the CustomerID field to execute JavaScript code that runs immediatly after the data is saved.The issue onlyoccurs if the configuration for Ad…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  • Low 3.5
    CVE-2022-3501

    Information exposure of template content due to missing check of permissions

    Article template contents with sensitive data could be accessed from agents without permissions.

    Accessing template content without permissions OTRS znuny Ubuntu
  • Low 3.5
    CVE-2022-39049

    Possible XSS in Admin Interface

    An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.

    OTRS OTRS ((OTRS)) Community Edition znuny Ubuntu