Lucene search
+L

5 matches found

NVD
NVD
added 2023/10/16 9:15 a.m.20 views

CVE-2023-38059

The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the payload. This can be used to retreive the IP of the user.This issue affects OTRS: from 7.0.X before 7.0.47, from 8.0.X before 8.0.37; OTRS Community Edition: from 6.0.X through...

5.3CVSS5.2AI score0.00459EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/16 9:15 a.m.7 views

CVE-2023-38059

The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the payload. This can be used to retreive the IP of the user.This issue affects OTRS: from 7.0.X before 7.0.47, from 8.0.X before 8.0.37; OTRS Community Edition: from 6.0.X through...

5.3CVSS5.8AI score0.00459EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/10/16 9:15 a.m.22 views

CVE-2023-38059

The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the payload. This can be used to retreive the IP of the user.This issue affects OTRS: from 7.0.X before 7.0.47, from 8.0.X before 8.0.37; OTRS Community Edition: from 6.0.X through...

5.3CVSS5.9AI score0.00459EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/10/16 8:10 a.m.13 views

CVE-2023-38059 External pictures can be loaded even if not allowed by configuration

The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the payload. This can be used to retreive the IP of the user.This issue affects OTRS: from 7.0.X before 7.0.47, from 8.0.X before 8.0.37; OTRS Community Edition: from 6.0.X through...

5.3CVSS6.8AI score0.00459EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/16 8:10 a.m.23 views

CVE-2023-38059 External pictures can be loaded even if not allowed by configuration

The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the payload. This can be used to retreive the IP of the user.This issue affects OTRS: from 7.0.X before 7.0.47, from 8.0.X before 8.0.37; OTRS Community Edition: from 6.0.X through...

5.3CVSS5.5AI score0.00459EPSS
SaveExploits0References1
Rows per page
Query Builder