https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:38:03 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-12688 cnvd-2019-12688 https://cve.radiocsirt.org/vuln/cnvd-2019-12688 https://cve.radiocsirt.org/vuln/euvd-2026-53101 EUVD-2026-53101 https://cve.radiocsirt.org/vuln/euvd-2026-53101 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9752 <p>An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.</p> <p>An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9752 https://cve.radiocsirt.org/vuln/ghsa-246f-fqrw-2v49 <p>An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.</p> <p>An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.</p> https://cve.radiocsirt.org/vuln/ghsa-246f-fqrw-2v49 https://cve.radiocsirt.org/vuln/gsd-2019-9752 gsd-2019-9752 https://cve.radiocsirt.org/vuln/gsd-2019-9752 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0551-1 <p>Recommended update for otrs</p> <p>Recommended update for otrs</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0551-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9752 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: otrs2, Ubuntu:18.04:LTS: otrs2</p> <p>An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: otrs2, Ubuntu:18.04:LTS: otrs2</p> <p>An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9752