CVE-2017-14635 | BDVDB-2026-90778 Detail

Description#

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.debian.org/security/2017/dsa-4021
https://www.otrs.com/security-advisory-2017-04-security-update-otrs-versions/

Exploit#

No public exploit known

History#

Version 12017-09-21Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.