CVE-2022-39049CWE-79

Possible XSS in Admin Interface

Low · published September 5, 2022

CVSS v3.1
3.5
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-09-05T06:40Z
EPSS history
Timeline
  • 05 SEP 06:40Z
    Possible XSS in Admin Interface
    cvelistv5