CVE-2023-38057

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

CVE-2023-38057

CVE-2023-38057 affects OTRS Survey modules: 7.0.x prior to 7.0.32, 8.0.x prior to 8.0.13, and the ((OTRS)) Community Edition Survey module from 6.0.x through 6.0.22. The vulnerability is caused by improper input validation in the survey module, allowing an attacker who has a link to a valid, unan...