CVE-2022-39049

🗓️ 05 Sep 2022 06:40:11Reported by OTRSType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 63 Views

An admin user in OTRS can manipulate the URL to execute JavaScript

Reporter	Title	Published	Views	Family All 29
ATTACKERKB	CVE-2022-39049	5 Sep 202207:00	–	attackerkb
CNNVD	OTRS 跨站脚本漏洞	5 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-39049 Possible XSS in Admin Interface	5 Sep 202206:40	–	cvelist
EUVD	EUVD-2022-41595	3 Oct 202520:07	–	euvd
NVD	CVE-2022-39049	5 Sep 202207:15	–	nvd
OpenVAS	OTRS XSS Vulnerability (OSA-2022-10)	6 Sep 202200:00	–	openvas
OSV	CVE-2022-39049	5 Sep 202207:15	–	osv
OSV	UBUNTU-CVE-2022-39049	5 Sep 202207:15	–	osv
Prion	Code injection	5 Sep 202207:15	–	prion
Positive Technologies	PT-2020-6429 · Otrs Ag +1 · Otrs +2	29 Dec 202000:00	–	ptsecurity

NVD

Node

otrs otrsRange6.0.0–6.0.32community

otrs otrsRange7.0.0–7.0.37

otrs otrsRange8.0.0–8.0.25

[
  {
    "product": "OTRS",
    "vendor": "OTRS AG",
    "versions": [
      {
        "lessThanOrEqual": "7.0.36",
        "status": "affected",
        "version": "7.0.x",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "8.0.24",
        "status": "affected",
        "version": "8.0.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "((OTRS)) Community Edition",
    "vendor": "OTRS AG",
    "versions": [
      {
        "lessThan": "6.0.x*",
        "status": "affected",
        "version": "6.0.1",
        "versionType": "custom"
      }
    ]
  }
]