CVE-2025-24387

概要

参考情報

• otrs.com/release-notes/otrs-security-advisory-2025-05 · Vendor Advisory

otrs のその他の脆弱性

• CVE-2026-48209高 7.1An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers t…
• CVE-2026-48208中 6.5An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject s…
• CVE-2026-48191低 3.5An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules al…
• CVE-2026-48190低 3.5An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the…
• CVE-2026-48189中 5.7An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to oth…