| Package | Affected versions | Patched versions |
|---|---|---|
| otrs | = 3.3.0= 3.3.1= 3.3.10= 3.3.11= 3.3.12= 3.3.13= 3.3.14= 3.3.15= 3.3.16= 3.3.17= 3.3.2= 3.3.3= 3.3.4= 3.3.5= 3.3.6= 3.3.7= 3.3.8= 3.3.9= 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.14= 4.0.15= 4.0.16= 4.0.17= 4.0.18= 4.0.19= 4.0.2= 4.0.20= 4.0.21= 4.0.22= 4.0.23= 4.0.24= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 5.0.0= 5.0.1= 5.0.10= 5.0.11= 5.0.12= 5.0.13= 5.0.14= 5.0.15= 5.0.16= 5.0.17= 5.0.18= 5.0.19= 5.0.2= 5.0.20= 5.0.21= 5.0.22= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9 |
In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free