1952 matches found
OTRS-4.0.1-6.0.1-Remote-Command-Execution
OTRS-4.0.1-6.0.1 Remote Command Execution This exploit is developed based on https://www.exploit-db.com/exploits/43853 It will perform the authentication against OTRS panel and provide a reverse shell. Usage: python3 CVE-2017-16921.py CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS...
CLEANSTART-2024-TQ32856 When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys
Security vulnerability affects the otrs package. When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys...
CLEANSTART-2024-VZ65902 attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passwo...
Security vulnerability affects the otrs package. An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated...
CLEANSTART-2024-TJ47241 It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords
Security vulnerability affects the otrs package. It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Tokens, generated by users which already requested new passwords...
CLEANSTART-2024-BK15179 In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue
Security vulnerability affects the otrs package. In the login screens in agent and customer interface, Username and Password fields use autocomplete, which might be considered as security issue...
CLEANSTART-2024-CK19682 Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted SVG file rendered ...
Security vulnerability affects the otrs package. Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted SVG file rendered as inline jpg file...
CLEANSTART-2024-RZ90919 In jQuery starting with 1
Security vulnerability affects the otrs package. In jQuery starting with 1...
CLEANSTART-2024-CY35414 issue was discovered in Open Ticket Request System (OTRS) 5
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 5...
CLEANSTART-2024-UX61985 Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e
Security vulnerability affects the otrs package. Improper Check for filenames with overly long extensions in PostMaster sending in email or uploading files e...
CLEANSTART-2024-RN14756 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-TT49662 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-SL08368 jQuery before 3
Security vulnerability affects the otrs package. jQuery before 3...
CLEANSTART-2024-WF89889 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-WT50131 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
CLEANSTART-2024-BZ08127 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
CLEANSTART-2024-VX73174 CKEditor 4
Security vulnerability affects the otrs package. CKEditor 4...
CLEANSTART-2024-AZ22195 issue was discovered in Open Ticket Request System (OTRS) 6
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 6...
CLEANSTART-2024-ZP87084 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
CLEANSTART-2024-ZV08048 In OTRS 6
Security vulnerability affects the otrs package. In OTRS 6...
CLEANSTART-2024-UV46944 Agents are able to list appointments in the calendars without required permissions
Security vulnerability affects the otrs package. Agents are able to list appointments in the calendars without required permissions...