CVE-2011-1518 — Cross-site Scripting in Otrs

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 36.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian Otrs2Otrs
Timeline
PublishedApr 18
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶debiandebian/otrs2< otrs2 2.4.10+dfsg1-1 (bullseye)
▶NVDotrs/otrs17 versions+16

🔴Vulnerability Details

2
GHSA
GHSA-j4j2-652r-qc85: Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2↗2022-05-17
▶
OSV
CVE-2011-1518: Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2↗2011-04-18
▶

📋Vendor Advisories

1
Debian
CVE-2011-1518: otrs2 - Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request Syste...↗2011
▶
CVE-2011-1518 — Cross-site Scripting in Otrs | cvebase