VDB
DEBIAN-CVE-2019-16375
DEBIAN-CVE-2019-16375
PUBLISHED
CVSS 5.400000095367432 MEDIUM
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious JavaScript code as an article body. This malicious code is executed when an agent composes an answer to the original article.
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | otrs2 | 2.2.5-2, 2.2.6-1, 2.2.7-1 |
Timeline
- Mar 19, 2020 CVE Published
- Apr 28, 2026 CVE Updated