https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:38:01.272340+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-12688 cnvd-2019-12688 2026-10-03T19:38:01.372856+00:00 cnvd-2019-12688 https://cve.radiocsirt.org/vuln/euvd-2026-53101 EUVD-2026-53101 2026-10-03T19:38:01.372896+00:00 EUVD-2026-53101 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9752 fkie_cve-2019-9752 2026-10-03T19:38:01.372910+00:00

An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.

 https://cve.radiocsirt.org/vuln/ghsa-246f-fqrw-2v49 GHSA-246f-fqrw-2v49 2026-10-03T19:38:01.372940+00:00

An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.

 https://cve.radiocsirt.org/vuln/gsd-2019-9752 gsd-2019-9752 2026-10-03T19:38:01.372957+00:00 gsd-2019-9752 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0551-1 openSUSE-SU-2020:0551-1 — Recommended update for otrs 2026-10-03T19:38:01.372968+00:00

Recommended update for otrs

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9752 UBUNTU-CVE-2019-9752 2026-10-03T19:38:01.372994+00:00

Affected: Ubuntu:16.04:LTS: otrs2, Ubuntu:18.04:LTS: otrs2

An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.