| Package | Affected versions | Patched versions |
|---|---|---|
| otrs | ≥ 3.0.0, ≤ 3.0.21≥ 3.1.0, ≤ 3.1.17≥ 3.2.0, ≤ 3.2.8 | |
| otrs itsm | ≥ 3.0.0, ≤ 3.0.8≥ 3.1.0, ≤ 3.1.9≥ 3.2.0, ≤ 3.2.6 |
Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free