CVE-2024-23790

2024-01-2900:00:00

ubuntu.com

improper input validation

otrs

user avatars

upload functionality

security vulnerability

versions 7.0.x

7.0.48

8.0.x

8.0.37

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

JSON

Improper Input Validation vulnerability in the upload functionality for
user avatars allows functionality misuse due to missing check of filetypes.
This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through
8.0.37, from 2023 through 2023.1.1.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchotrs2< anyUNKNOWN
ubuntu20.04noarchotrs2< anyUNKNOWN
ubuntu22.04noarchotrs2< anyUNKNOWN
ubuntu16.04noarchotrs2< anyUNKNOWN
ubuntu23.10noarchznuny< anyUNKNOWN
ubuntu24.04noarchznuny< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	otrs2	< any	UNKNOWN
ubuntu	20.04	noarch	otrs2	< any	UNKNOWN
ubuntu	22.04	noarch	otrs2	< any	UNKNOWN
ubuntu	16.04	noarch	otrs2	< any	UNKNOWN
ubuntu	23.10	noarch	znuny	< any	UNKNOWN
ubuntu	24.04	noarch	znuny	< any	UNKNOWN