otrs2 vulnerabilities (Ubuntu)
94 vulnerabilities.
-
otrs2Ubuntu Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user... 8.6 High -
otrs2Ubuntu In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain... 9.5 Critical -
otrs2Ubuntu Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication 9.4 Critical -
otrs2Ubuntu Insufficient Neutralization of Formula Elements in CSV Exports 6.1 Medium -
otrs2Ubuntu Duplicate Identity / Identity Shadowing across CustomerUser backends 5.4 Medium -
otrs2Ubuntu Cross-Site Request Forgery in Administrative Actions 4.3 Medium -
otrs2Ubuntu Insufficient Session Revocation for JWT Authentication 9.1 Critical -
otrs2Ubuntu Unauthenticated Disclosure of Agent Frontend Configuration 5.3 Medium -
otrs2Ubuntu Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory 8.7 High -
otrs2Ubuntu Stored XSS in external pages 4.8 Medium -
otrs2Ubuntu Cross-Site Request Forgery in Import/Export Admin console 5.4 Medium -
otrs2Ubuntu Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. 4.8 Medium -
otrs2Ubuntu In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in ... 6.4 Medium -
otrs2Ubuntu IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences. 5.4 Medium -
otrs2Ubuntu SQL Injection via MySQL Quote Method 9.1 Critical -
otrs2Ubuntu [Unknown description] No score -
otrs2Ubuntu Possible DoS via SQL Box 4.5 Medium -
otrs2Ubuntu A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl... 6.1 Medium -
otrs2Ubuntu canvg Prototype Pollution vulnerability 9.8 Critical -
otrs2Ubuntu Missing file type check in avatar picture upload 3.5 Low -
otrs2Ubuntu Unnecessary data is written to log if issues during indexing occurs 4.9 Medium -
otrs2Ubuntu Insufficient access control 5.3 Medium -
otrs2Ubuntu Possible XSS execution in customer information 3.5 Low -
otrs2Ubuntu External pictures can be loaded even if not allowed by configuration 5.3 Medium -
otrs2Ubuntu SSL Certificates are not checked for E-Mail Handling 8.7 High -
otrs2Ubuntu Host header injection by attachments in web service 6.3 Medium -
otrs2Ubuntu Tickets can be moved without permissions 4.1 Medium -
otrs2Ubuntu XSS stored in survey answers 4.1 Medium -
otrs2Ubuntu Code execution via System Configuration 7.2 High -
otrs2Ubuntu An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker... 6.1 Medium -
otrs2Ubuntu Code execution through ACL creation 7.4 High -
otrs2Ubuntu Possible XSS in Ticket Actions 6.1 Medium -
otrs2Ubuntu Information disclosure in Request New Password feature 5.3 Medium -
otrs2Ubuntu Information disclosure in the External Interface 3.5 Low -
otrs2Ubuntu OTRS version number is always in the exported ICS files 3.5 Low -
otrs2Ubuntu Authenticated remote code execution 6.4 Medium -
otrs2Ubuntu Support Bundle includes S/Mime and PGP secret or PIN 5.2 Medium -
otrs2Ubuntu User enumeration issue using "lost password" feature 5.3 Medium -
otrs2Ubuntu XSS attack in appointment edit popup screen 5.7 Medium -
otrs2Ubuntu DoS attack using PostMaster filters 5.3 Medium -
otrs2Ubuntu XSS attack using special link in email 6.5 Medium -
otrs2Ubuntu Unautorized access to the calendar appointments 3.5 Low -
otrs2Ubuntu Unautorized listing of the customer user emails 3.5 Low -
otrs2Ubuntu Support Bundle includes S/Mime and PGP keys 5.2 Medium -
otrs2Ubuntu XSS in the ticket overview screens 7.5 High -
otrs2Ubuntu Possible DoS attack using a special crafted URL in email body 6.5 Medium -
otrs2Ubuntu Agent is able to link customer's Config Items without permission 3.5 Low -
otrs2Ubuntu Information exposure in PDF export 5.7 Medium -
otrs2Ubuntu XSS in Survey Module 3.5 Low -
otrs2Ubuntu Dynamic templates reveal sensitive data when OTRS tags are used 4.3 Medium - Show olderLoading…