Описание
Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 6.0.5-1 |
| cosmic | not-affected | |
| devel | DNE | |
| disco | not-affected | |
| eoan | not-affected | |
| esm-apps/bionic | not-affected | 6.0.5-1 |
| esm-apps/focal | not-affected | |
| esm-apps/jammy | not-affected | |
| esm-apps/xenial | needed | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
Показывать по
EPSS
3.5 Low
CVSS2
4.8 Medium
CVSS3
Связанные уязвимости
Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled.
Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before ...
Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled.
EPSS
3.5 Low
CVSS2
4.8 Medium
CVSS3