CVE-2013-4718

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) ITSM versions 3.0.x through 3.0.8 Open Ticket Request System (OTRS) ITSM versions 3.1.x through 3.1.9 Open Ticket Request System (OTRS) ITSM versions 3.2.x through 3.2.6

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via an ITSM ConfigItem search. This could potentially lead to unauthorized actions on the system.

Recommendations For versions 3.0.x through 3.0.8, update to version 3.0.9 or later. For versions 3.1.x through 3.1.9, update to version 3.1.10 or later. For versions 3.2.x through 3.2.6, update to version 3.2.7 or later.