Lucene search

K
freebsdFreeBSD70B72A52-9E54-11E3-BABE-60A44C524F57
HistoryFeb 25, 2014 - 12:00 a.m.

otrs -- XSS Issue

2014-02-2500:00:00
vuxml.freebsd.org
7

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.043 Low

EPSS

Percentile

92.4%

The OTRS Project reports:

An attacker could send a specially prepared HTML email to OTRS. If
he can then trick an agent into following a special link to display this email,
JavaScript code would be executed.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchotrs< 3.1.20UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.043 Low

EPSS

Percentile

92.4%