CVE-2019-10067

An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17

published May 21, 2019

CVSS
—
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17. An attacker who is logged into OTRS as an agent user with appropriate permissions may manipulate the URL to cause execution of JavaScript in the context of OTRS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01134 · 66.2th percentile
Published
2019-05-21T23:09Z
EPSS history
Timeline
  • 21 MAY 23:09Z
    An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17
    cvelistv5