CVE-2018-19141 | BDVDB-2026-109281 Detail

Description#

Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.debian.org/debian-lts-announce/2018/11/msg00028.html
https://community.otrs.com/security-advisory-2018-09-security-update-for-otrs-framework/

Exploit#

No public exploit known

History#

Version 12018-11-11Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.