NetSight
medium6.5

CVE-2022-4427

Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects…

Impact

Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7.0.1 before 7.0.40 Patch 1, from 8.0.1 before 8.0.28 Patch 1; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.

Affected products

VendorProductAffected versions
OtrsOtrs
from 6.0.1 through 6.0.34
from 7.0.1 before 7.0.40
from 8.0.1 before 8.0.28
Versions 7.0.40, 8.0.28

Weakness classification

References