Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7r29-5mg8-c6rc

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

EPSS

Процентиль: 80%
0.01922
Низкий

8.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 9 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

CVSS3: 8.8
nvd
около 9 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

CVSS3: 8.8
debian
около 9 лет назад

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4 ...

suse-cvrf
около 9 лет назад

Security update for otrs

CVSS3: 8.8
altlinux
около 9 лет назад

ALT-PU-2017-2623: package `otrs` update to version 5.0.23-alt1

EPSS

Процентиль: 80%
0.01922
Низкий

8.8 High

CVSS3

Дефекты

CWE-20