NetSight
IP …
medium5.4

CVE-2013-4718

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remot…

Impact

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML via an ITSM ConfigItem search.

Affected products

VendorProductAffected versions
OtrsOtrs
from 3.0.0 through 3.0.21
from 3.1.0 through 3.1.17
from 3.2.0 through 3.2.8
OtrsOtrs Itsm
from 3.0.0 through 3.0.8
from 3.1.0 through 3.1.9
from 3.2.0 through 3.2.6

Weakness classification

CWE-79

References