| Package | Affected versions | Patched versions |
|---|---|---|
| otrs | ≥ 6.0.1≥ 7.0.0, ≤ 7.0.26 |
There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free