low3.5
CVE-2022-39049
An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.
Impact
An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | from 6.0.0 through 6.0.32 from 7.0.0 before 7.0.37 from 8.0.0 before 8.0.25 |