PT-2019-19843
CVE-2019-9751
·
تاريخ النشر
2019-03-13
·
تاريخ التحديث
2019-03-15
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Open Ticket Request System (OTRS) versions 6.x through 6.0.16
Open Ticket Request System (OTRS) versions 7.x through 7.0.4
Description
An issue in OTRS allows an attacker who is logged in as an admin user to manipulate the URL and cause execution of JavaScript in the context of OTRS. This issue is related to the Kernel/Output/Template/Document.pm file.
Recommendations
For OTRS versions 6.x through 6.0.16, update to version 6.0.17 or later.
For OTRS versions 7.x through 7.0.4, update to version 7.0.5 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾