CVE-2022-0473

MEDIUM 4.8CVE-2022-0473 · Published 07/02/2022 · updated 17/06/2026

In short

CVE-2022-0473 is a MEDIUM (CVSS 4.8) vulnerability affecting otrs (otrs).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.5% of all vulnerabilities.
Fix: update to 7.0.32 or later.

Package	Affected versions	Patched versions
otrs otrs	`≥ 7.0.0, < 7.0.32`	`7.0.32`

Description

OTRS administrators can configure dynamic field and inject malicious JavaScript code in the error message of the regular expression check. When used in the agent interface, malicious code might be exectued in the browser. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.31 and prior versions.

References

otrs.com/release-notes/otrs-security-advisory-2022-01 · Vendor Advisory

More vulnerabilities in otrs

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

otrs

≥ 7.0.0, < 7.0.32

7.0.32

More vulnerabilities in otrs

See all →