Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7r29-5mg8-c6rc

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

EPSS

Процентиль: 79%
0.01922
Низкий

8.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 9 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

CVSS3: 8.8
nvd
почти 9 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

CVSS3: 8.8
debian
почти 9 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4 ...

suse-cvrf
почти 9 лет назад

Security update for otrs

EPSS

Процентиль: 79%
0.01922
Низкий

8.8 High

CVSS3

Дефекты

CWE-20