Описание
In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | not-affected | 6.0.11-1 |
| devel | DNE | |
| disco | not-affected | 6.0.11-1 |
| eoan | not-affected | 6.0.11-1 |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 6.0.11-1 |
| esm-apps/jammy | not-affected | 6.0.11-1 |
| esm-apps/xenial | needed | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
Показывать по
5.8 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.
In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before ...
In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.
5.8 Medium
CVSS2
6.5 Medium
CVSS3