Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-4751HistoryOct 22, 2012 - 4:55 p.m.
CVE-2012-4751
2012-10-2216:55:00
Debian Security Bug Tracker
security-tracker.debian.org
10
0.005 Low
EPSS
Percentile
76.1%
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC attribute of an element, as demonstrated by an IFRAME element.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | otrs2 | < 3.1.7+dfsg1-6 | otrs2_3.1.7+dfsg1-6_all.deb |
| Debian | 10 | all | otrs2 | < 3.1.7+dfsg1-6 | otrs2_3.1.7+dfsg1-6_all.deb |
Related
packetstorm
packetstorm
OTRS 3.1 Cross Site Scripting
2012-10-18 00:00:00
cvelist
cvelist
CVE-2012-4751
2012-10-22 16:00:00
nessus
nessus
ubuntucve
ubuntucve
CVE-2012-4751
2012-10-22 00:00:00
freebsd
freebsd
otrs -- XSS vulnerability
2012-10-16 00:00:00
otrs -- XSS vulnerability could lead to remote code execution
2012-10-16 00:00:00
openvas
openvas
OTRS Email Body XSS Vulnerability (OSA-2012-03)
2013-09-25 00:00:00
Debian Security Advisory DSA 2733-1 (otrs2 - SQL injection)
2013-08-02 00:00:00
Debian: Security Advisory (DSA-2733-1)
2013-08-01 00:00:00
prion
prion
Cross site scripting
2012-10-22 16:55:00
cve
cve
CVE-2012-4751
2012-10-22 16:55:00
cert
cert
OTRS contains a cross-site scripting vulnerability
2012-10-17 00:00:00
osv
osv
otrs2 - SQL injection
2013-08-02 00:00:00
debian
debian
[SECURITY] [DSA 2733-1] otrs2 security update
2013-08-02 20:26:06
[SECURITY] [DSA 2733-1] otrs2 security update
2013-08-02 20:25:45