Otrs

Otrs

138 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2010-4762

  • EPSS 0.15%
  • Veröffentlicht 18.03.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request System (OTRS) before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the cust...

6.5

CVE-2010-4763

Exploit
  • EPSS 0.2%
  • Veröffentlicht 18.03.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the (1) Stat...

5

CVE-2010-4764

  • EPSS 0.3%
  • Veröffentlicht 18.03.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Open Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypted e-mail messages that were based on revoked PGP or GPG keys, which makes it easier for remote attackers to spoof e-mail communica...

4.9

CVE-2010-4765

  • EPSS 0.26%
  • Veröffentlicht 18.03.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS) before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets.

4.3

CVE-2010-4766

Exploit
  • EPSS 0.23%
  • Veröffentlicht 18.03.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circum...

5

CVE-2010-4767

  • EPSS 0.59%
  • Veröffentlicht 18.03.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of serv...

6

CVE-2010-4768

Exploit
  • EPSS 0.14%
  • Veröffentlicht 18.03.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certai...

5

CVE-2011-1433

  • EPSS 0.36%
  • Veröffentlicht 18.03.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive...

7.5

CVE-2011-0456

  • EPSS 3.05%
  • Veröffentlicht 11.03.2011 17:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."

2.6

CVE-2010-4071

  • EPSS 0.45%
  • Veröffentlicht 20.01.2011 19:00:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail.