PT-2019-19843

CVE-2019-9751

·

Publicado

2019-03-13

·

Atualizado

2019-03-15

Descrição por

CVSS 3.1
4.8
Média
MétricasAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions 6.x through 6.0.16 Open Ticket Request System (OTRS) versions 7.x through 7.0.4
Description An issue in OTRS allows an attacker who is logged in as an admin user to manipulate the URL and cause execution of JavaScript in the context of OTRS. This issue is related to the Kernel/Output/Template/Document.pm file.
Recommendations For OTRS versions 6.x through 6.0.16, update to version 6.0.17 or later. For OTRS versions 7.x through 7.0.4, update to version 7.0.5 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2019-9751
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com