PT-2019-19843

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 6.x through 6.0.16 Open Ticket Request System OTRS versions 7.x through 7.0.4 Description An issue in OTRS allows an attacker who is logged in as an admin user to manipulate the URL and cause execution ...

PT-2019-19844

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 5.x through 5.0.33 Open Ticket Request System OTRS versions 6.x through 6.0.15 Open Ticket Request System OTRS versions 7.x through 7.0.3 Description An issue was discovered in Open Ticket Request Syste...

Open Ticket Request System Cross-Site Scripting Vulnerability (CNVD-2019-09606)

Open Ticket Request System OTRS is an open source defect tracking and management system software. A cross-site scripting vulnerability exists in OTRS version 6.0.x prior to 6.0.13, which can be exploited by remote attackers to execute JavaScript code via URL manipulation...

UBUNTU-CVE-2018-19142

Open Ticket Request System OTRS 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL...

DEBIAN-CVE-2018-19142

Open Ticket Request System OTRS 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL...

CVE-2018-19142

Open Ticket Request System OTRS 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL...

PT-2018-14831

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 4.0.x through 4.0.32 Open Ticket Request System OTRS versions 5.0.x through 5.0.30 Description The issue allows an admin to conduct a cross-site scripting XSS attack via a modified URL. This is due to t...

CVE-2018-19141: Improper Neutralization of Input During Web Page Generation

Open Ticket Request System OTRS 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled...

PT-2018-14833

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 4.0.x through 4.0.32 Open Ticket Request System OTRS versions 5.0.x through 5.0.30 Open Ticket Request System OTRS versions 6.0.x through 6.0.12 Description The issue allows an authenticated user to...

CVE-2018-19143: Direct Request

Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...

CVE-2018-19142: Improper Neutralization of Input During Web Page Generation

Open Ticket Request System OTRS 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL...

Open redirect

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources...

Open Ticket Request System Arbitrary File Deletion Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...

CVE-2018-16587: Improper Input Validation

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to...

CVE-2018-16587

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to...

PT-2018-13630

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 4.0.x through 4.0.31 Open Ticket Request System OTRS versions 5.0.x through 5.0.29 Open Ticket Request System OTRS versions 6.0.x through 6.0.10 Description An issue exists where an attacker could send ...

PT-2018-13631

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 4.0.x through 4.0.31 Open Ticket Request System OTRS versions 5.0.x through 5.0.29 Open Ticket Request System OTRS versions 6.0.x through 6.0.10 Description An issue exists where an attacker could send ...

Open Ticket Request System Elevation of Privilege Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...

CVE-2018-14593

An issue was discovered in Open Ticket Request System OTRS 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL...

Design/Logic Flaw

An issue was discovered in Open Ticket Request System OTRS 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL...