CVE-2018-20800 — Improper Input Validation in Otrs

CWE-20 — Improper Input Validation4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 54.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian Otrs2Otrs
Timeline
PublishedMar 13
Latest updateMay 14

Description

An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major updates) will experience data loss in their agent preferences table.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶debiandebian/otrs2< otrs2 6.0.14-1 (bullseye)
▶NVDotrs/otrs5.0.31, 6.0.13+1

Patches

Patch: community.otrs.com ↗Patch: community.otrs.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qf78-x5p6-qwh5: An issue was discovered in Open Ticket Request System (OTRS) 5↗2022-05-14
▶
OSV
CVE-2018-20800: An issue was discovered in Open Ticket Request System (OTRS) 5↗2019-03-13
▶

📋Vendor Advisories

1
Debian
CVE-2018-20800: otrs2 - An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. ...↗2018
▶
CVE-2018-20800 — Improper Input Validation in Otrs | cvebase