https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:00:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-57726 EUVD-2026-57726 https://cve.radiocsirt.org/vuln/euvd-2026-57726 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16375 <p>An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious JavaScript code as an article body. This malicious code is executed when an agent composes an answer to the original article.</p> <p>An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious JavaScript code as an article body. This malicious code is executed when an agent composes an answer to the original article.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-16375 https://cve.radiocsirt.org/vuln/ghsa-c82j-j7c2-cx75 <p>An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious JavaScript code as an article body. This malicious code is executed when an agent composes an answer to the original article.</p> <p>An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious JavaScript code as an article body. This malicious code is executed when an agent composes an answer to the original article.</p> https://cve.radiocsirt.org/vuln/ghsa-c82j-j7c2-cx75 https://cve.radiocsirt.org/vuln/gsd-2019-16375 gsd-2019-16375 https://cve.radiocsirt.org/vuln/gsd-2019-16375 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0551-1 <p>Recommended update for otrs</p> <p>Recommended update for otrs</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0551-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-16375 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: otrs2, Ubuntu:18.04:LTS: otrs2</p> <p>An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious JavaScript code as an article body. This malicious code is executed when an agent composes an answer to the original article.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: otrs2, Ubuntu:18.04:LTS: otrs2</p> <p>An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious JavaScript code as an article body. This malicious code is executed when an agent composes an answer to the original article.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-16375 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2226 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in OTRS ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in OTRS ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2226