Описание
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application.
Ссылки
- PatchVendor Advisory
- Mailing ListThird Party Advisory
- Vendor Advisory
- Release NotesVendor Advisory
- PatchVendor Advisory
- Mailing ListThird Party Advisory
- Vendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
EPSS
4.6 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
Связанные уязвимости
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application.
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x thr ...
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application.
EPSS
4.6 Medium
CVSS3
4.9 Medium
CVSS2