PT-2026-27200

CVE-2025-52204

·

Publicado

2026-03-23

·

Atualizado

2026-04-28

Descrição por

CVSS 3.1
6.1
Média
MétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Znuny::ITSM versions 6.5.x
Description A Cross-Site Scripting (XSS) issue exists in Znuny::ITSM 6.5.x. The issue is located in the customer.pl API endpoint and is triggered through the OTRSCustomerInterface parameter. This allows for potential malicious script injection.
Recommendations Address the issue in the customer.pl endpoint by sanitizing the OTRSCustomerInterface parameter.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2025-52204
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com