| Package | Affected versions | Patched versions |
|---|---|---|
| open ticket request system | ≥ 4.0.0, < 4.0.32≥ 5.0.0, < 5.0.30≥ 6.0.0, < 6.0.11 | 4.0.325.0.306.0.11 |
In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free