Lucene search

K
freebsdFreeBSD95A69D1A-52A5-11E2-A289-1C4BD681F0CF
HistoryAug 30, 2012 - 12:00 a.m.

otrs -- XSS vulnerability in Firefox and Opera

2012-08-3000:00:00
vuxml.freebsd.org
18

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

66.2%

OTRS Security Advisory reports:

This advisory covers vulnerabilities discovered in the OTRS core
system. This is a variance of the XSS vulnerability, where an attacker could
send a specially prepared HTML email to OTRS which would cause JavaScript code
to be executed in your browser while displaying the email in Firefox and Opera.
In this case this is achieved with an invalid HTML structure with nested tags.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchotrs< 3.1.10UNKNOWN

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

66.2%