VDB

CVE-2018-17883

CVE-2018-17883 PUBLISHED CVSS 6.099999904632568 MEDIUM

An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker could send an e-mail message with a malicious link to an OTRS system or an agent. If a logged-in agent opens this link, it could cause the execution of JavaScript in the context of OTRS.

EPSS 0.44% · 37.0th percentile

Risk Scores

CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.44%
37.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSotrs25.0.23-1, 5.0.24-1, 6.0.3-1

Timeline

  • Apr 15, 2023 CVE Published
  • Apr 16, 2023 EPSS Score
  • May 24, 2023 EPSS Score
  • Jul 1, 2023 EPSS Score
  • Aug 7, 2023 EPSS Score
  • Sep 14, 2023 EPSS Score
  • Oct 22, 2023 EPSS Score
  • Nov 29, 2023 EPSS Score
  • Jan 6, 2024 EPSS Score
  • Feb 12, 2024 EPSS Score
  • Mar 21, 2024 EPSS Score
  • Apr 28, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›