CVE-2022-39049

Possible XSS in Admin Interface

State: Published
Severity: 3.5 Low
Published: Sep 5, 2022
Updated: Sep 16, 2024
Reserved: Aug 31, 2022

Description

An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.

Scores

CVSS	Score	Vector	Source
3.1	3.5 Low	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N	OTRS

Weaknesses

CWE-79 Cross-site Scripting (XSS)

Affected Products

Product	Versions
OTRSOTRS AG	7.0.x through 7.0.36Affected 8.0.x through 8.0.24Affected
((OTRS)) Community EditionOTRS AG	6.0.1 to before 6.0.x*Affected

References

https://otrs.com/release-notes/otrs-security-advisory-2022-10/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.