CVE-2019-9751

The CVE-2019-9751 vulnerability affects Open Ticket Request System (OTRS). Affects OTRS 6.x prior to version 6.0.17 and 7.x prior to 7.0.5. The issue arises from Kernel/Output/Template/Document.pm, where an admin-user can manipulate the URL to cause JavaScript execution in the OTRS context. Impac...

CVE-2019-9752

An issue was discovered in Open Ticket Request System OTRS 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This ...

CVE-2018-20800

OTRS CVE-2018-20800 affects Open Ticket Request System versions 5.0.31 and 6.0.13. Upgrading to 6.0.13 (or 5.0.31 in some patch paths) may cause data loss in the agent preferences table. The provided documents do not include a concrete root cause analysis or a vendor patch/mitigation, and while m...

CVE-2018-20800: Improper Input Validation

An issue was discovered in Open Ticket Request System OTRS 5.0.31 and 6.0.13. Users updating to 6.0.13 also patchlevel updates or 5.0.31 only major updates will experience data loss in their agent preferences table...

CVE-2019-9751: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Open Ticket Request System OTRS 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS. This is related to Kernel/Output/Template/Document.pm...

PT-2019-19844

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 5.x through 5.0.33 Open Ticket Request System OTRS versions 6.x through 6.0.15 Open Ticket Request System OTRS versions 7.x through 7.0.3 Description An issue was discovered in Open Ticket Request Syste...

PT-2019-10242

Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 5.0.31 and 6.0.13 Description: An issue in Open Ticket Request System OTRS can cause data loss in the agent preferences table for users who update to the specified versions. Recommendations: For versio...

PT-2019-19843

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 6.x through 6.0.16 Open Ticket Request System OTRS versions 7.x through 7.0.4 Description An issue in OTRS allows an attacker who is logged in as an admin user to manipulate the URL and cause execution ...

Open Ticket Request System Cross-Site Scripting Vulnerability (CNVD-2019-09606)

Open Ticket Request System OTRS is an open source defect tracking and management system software. A cross-site scripting vulnerability exists in OTRS version 6.0.x prior to 6.0.13, which can be exploited by remote attackers to execute JavaScript code via URL manipulation...

Open Ticket Request System (OTRS) File Deletion Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software. Open Ticket Request System OTRS suffers from a file deletion vulnerability that can be exploited by an attacker to delete files through manipulation of submission forms...

DEBIAN-CVE-2018-19142

Open Ticket Request System OTRS 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL...

UBUNTU-CVE-2018-19142

Open Ticket Request System OTRS 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL...

CVE-2018-19142

Open Ticket Request System OTRS 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL...

CVE-2018-19141: Improper Neutralization of Input During Web Page Generation

Open Ticket Request System OTRS 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled...

CVE-2018-19143: Direct Request

Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...

CVE-2018-19142: Improper Neutralization of Input During Web Page Generation

Open Ticket Request System OTRS 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL...

PT-2018-14831

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 4.0.x through 4.0.32 Open Ticket Request System OTRS versions 5.0.x through 5.0.30 Description The issue allows an admin to conduct a cross-site scripting XSS attack via a modified URL. This is due to t...

PT-2018-14833

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 4.0.x through 4.0.32 Open Ticket Request System OTRS versions 5.0.x through 5.0.30 Open Ticket Request System OTRS versions 6.0.x through 6.0.12 Description The issue allows an authenticated user to...

Open redirect

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources...

CVE-2018-16587: Improper Input Validation

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to...