| Package | Affected versions | Patched versions |
|---|---|---|
| otrs | ≥ 5.0.0, ≤ 5.0.36≥ 6.0.0, ≤ 6.0.19≥ 7.0.0, ≤ 7.0.7 |
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. An attacker could send a malicious email to an OTRS system. If a logged-in agent user quotes it, the email could cause the browser to load external image resources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free