https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 22:17:04 +0000 https://cve.radiocsirt.org/vuln/cve-2018-7567 <p>In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server during package installation. NOTE: the vendor disputes this issue stating &#34;the behaviour is as designed and needed for different packages to be installed&#34;, &#34;there is a security warning if the package is not verified by OTRS Group&#34;, and &#34;there is the possibility and responsibility of an admin to check packages before installation which is possible as they are not binary.</p> <p>In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server during package installation. NOTE: the vendor disputes this issue stating &#34;the behaviour is as designed and needed for different packages to be installed&#34;, &#34;there is a security warning if the package is not verified by OTRS Group&#34;, and &#34;there is the possibility and responsibility of an admin to check packages before installation which is possible as they are not binary.</p> https://cve.radiocsirt.org/vuln/cve-2018-7567