Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7r29-5mg8-c6rc

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

EPSS

Процентиль: 72%
0.00725
Низкий

8.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 8 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

CVSS3: 8.8
nvd
больше 8 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

CVSS3: 8.8
debian
больше 8 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4 ...

suse-cvrf
больше 8 лет назад

Security update for otrs

EPSS

Процентиль: 72%
0.00725
Низкий

8.8 High

CVSS3

Дефекты

CWE-20