| Package | Affected versions | Patched versions |
|---|---|---|
| open ticket request system | ≥ 4.0.0, < 4.0.32≥ 5.0.0, < 5.0.30≥ 6.0.0, < 6.0.11 | 4.0.325.0.306.0.11 |
In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free