https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 22:22:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05546 bdu:2022-05546 https://cve.radiocsirt.org/vuln/bdu:2022-05546 https://cve.radiocsirt.org/vuln/euvd-2026-169762 EUVD-2026-169762 https://cve.radiocsirt.org/vuln/euvd-2026-169762 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39050 <p>An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external data sources e.g. database or ldap</p> <p>An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external data sources e.g. database or ldap</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-39050 https://cve.radiocsirt.org/vuln/ghsa-x46q-hjvj-45vc <p>An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external data sources e.g. database or ldap</p> <p>An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external data sources e.g. database or ldap</p> https://cve.radiocsirt.org/vuln/ghsa-x46q-hjvj-45vc https://cve.radiocsirt.org/vuln/gsd-2022-39050 gsd-2022-39050 https://cve.radiocsirt.org/vuln/gsd-2022-39050 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-39050 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: znuny, Ubuntu:25.10: znuny, Ubuntu:26.10: znuny, Ubuntu:26.04:LTS: znuny</p> <p>An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external data sources e.g. database or ldap</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: znuny, Ubuntu:25.10: znuny, Ubuntu:26.10: znuny, Ubuntu:26.04:LTS: znuny</p> <p>An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external data sources e.g. database or ldap</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-39050