Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-36094

Опубликовано: 06 сент. 2021
Источник: debian
EPSS Низкий

Описание

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

Примечания

  • OTRS, it's unclear to which extent Znuny might be affected since OTRS AG doesn't release

  • actionable information, also see https://github.com/znuny/Znuny/issues/128 and #993846

EPSS

Процентиль: 51%
0.00282
Низкий

Связанные уязвимости

CVSS3: 5.7
ubuntu
больше 4 лет назад

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

CVSS3: 5.7
nvd
больше 4 лет назад

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

github
больше 3 лет назад

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

EPSS

Процентиль: 51%
0.00282
Низкий