EUVD-2026-109244

Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects...

CervantesSec Cervantes authorization issue vulnerability

Versions 0.3 through 1.3-beta of CervantesSec contain an authorization issue vulnerability. This vulnerability stems from improper access control in JiraController, potentially allowing attackers to create, edit, or delete Jira tickets related to vulnerabilities in other projects...

Malicious code in auto-create-tickets (npm)

The package auto-create-tickets was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in auto-create-tickets (npm)

The package auto-create-tickets was found to contain malicious code...

MAL-2025-15107 Malicious code in auto-create-tickets (npm)

The package auto-create-tickets was found to contain malicious code...

CVE-2014-1694

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...

DEBIAN-CVE-2014-1694

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...