Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-36094

Опубликовано: 06 сент. 2021
Источник: nvd
CVSS3: 5.7
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:otrs:otrs:*:*:*:*:community:*:*:*
Версия от 6.0.1 (включая)
cpe:2.3:a:otrs:otrs:*:*:*:*:-:*:*:*
Версия от 7.0.0 (включая) до 7.0.29 (исключая)

EPSS

Процентиль: 51%
0.00282
Низкий

5.7 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79
CWE-79

Связанные уязвимости

CVSS3: 5.7
ubuntu
больше 4 лет назад

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

CVSS3: 5.7
debian
больше 4 лет назад

It's possible to craft a request for appointment edit screen, which co ...

github
больше 3 лет назад

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

EPSS

Процентиль: 51%
0.00282
Низкий

5.7 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79
CWE-79