CVE-2019-9892
published 2019-05-22CVE-2019-9892: An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS…
PriorityP337medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
1.10%
61.5th percentile
An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | otrs2 | < otrs2 6.0.18-1 (bullseye) | otrs2 6.0.18-1 (bullseye) |
| otrs | otrs | 5.0.0 – 5.0.34 | — |
| otrs | otrs | 6.0.0 – 6.0.17 | — |
| otrs | otrs | 7.0.0 – 7.0.6 | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
osv6.5MEDIUM
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8354-72xf-4743: An issue was discovered in Open Ticket Request System (OTRS) 5
ghsa_unreviewed·2022-05-24
CVE-2019-9892 [MEDIUM] CWE-91 GHSA-8354-72xf-4743: An issue was discovered in Open Ticket Request System (OTRS) 5
An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.
OSV
CVE-2019-9892: An issue was discovered in Open Ticket Request System (OTRS) 5
osv·2019-05-22·CVSS 6.5
CVE-2019-9892 [MEDIUM] CVE-2019-9892: An issue was discovered in Open Ticket Request System (OTRS) 5
An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.
Debian
CVE-2019-9892: otrs2 - An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34,...
vendor_debian·2019·CVSS 6.5
CVE-2019-9892 [MEDIUM] CVE-2019-9892: otrs2 - An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34,...
An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.
Scope: local
bullseye: resolved (fixed in 6.0.18-1)
No detection rules found.
Nuclei
Visualizer <3.3.1 - Blind Server-Side Request Forgery
nuclei·CVSS 10.0
CVE-2019-16932 [CRITICAL] Visualizer <3.3.1 - Blind Server-Side Request Forgery
Visualizer <3.3.1 - Blind Server-Side Request Forgery
Visualizer prior to 3.3.1 suffers from a blind server-side request forgery vulnerability via the /wp-json/visualizer/v1/upload-data endpoint.
Template:
id: CVE-2019-16932
info:
name: Visualizer <3.3.1 - Blind Server-Side Request Forgery
author: akincibor
severity: critical
description: |
Visualizer prior to 3.3.1 suffers from a blind server-side request forgery vulnerability via the /wp-json/visualizer/v1/upload-data endpoint.
impact: |
An attacker can exploit this vulnerability to send crafted requests to internal resources, potentially leading to unauthorized access or data leakage.
remediation: |
Update Visualizer plugin to version 3.3.1 or later to fix the SSRF vulnerability.
reference:
- https://wpscan.com/vulnerability/9892
-
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.htmlhttps://community.otrs.com/security-advisory-2019-04-security-update-for-otrs-framework/https://lists.debian.org/debian-lts-announce/2019/05/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.htmlhttps://community.otrs.com/security-advisory-2019-04-security-update-for-otrs-framework/https://lists.debian.org/debian-lts-announce/2019/05/msg00003.html
2019-05-22
Published