CVE-2022-4427CWE-20

SQL Injection via OTRS Search API

Medium · published December 19, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice

This issue affects OTRS: from 7.0.1 before 7.0.40 Patch 1, from 8.0.1 before 8.0.28 Patch 1; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00762 · 54.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-12-19T08:09Z
EPSS history
Timeline
  • 19 DEC 08:09Z
    SQL Injection via OTRS Search API
    cvelistv5