Otrs Ag Community Edition vulnerabilities

CVE-2026-48188 [CRITICAL] CWE-20 CVE-2026-48188: An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer modu An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is configured with the NO_BACKSLASH_ESCAPES SQL mode. This issue affects OTRS: * 7.0.X * 8.0.X * 2

CVE-2021-36100 [HIGH] CWE-78 CVE-2021-36100: Specially crafted string in OTRS system configuration can allow the execution of any system command. Specially crafted string in OTRS system configuration can allow the execution of any system command.

CVE-2022-4427 [CRITICAL] CWE-20 CVE-2022-4427: Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows S Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7.0.1 before 7.0.40 Patch 1, from 8.0.1 before 8.0.28 Patch 1; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.

CVE-2023-38060 [HIGH] CWE-20 CVE-2023-38060: Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations of the OTRS Generic Interface modules allows any authenticated attacker to to perform an host header injection for the ContentType header of the attachment. This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X befor

CVE-2023-5422 [CRITICAL] CWE-295 CVE-2023-5422: The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for st The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSL_get_verify_result() function is not used the certificated is trusted always and it can not be ensured that the certificate satisfies all necessary security requirements. This could allow an attacker to

CVE-2024-43444 [HIGH] CWE-532 CVE-2024-43444: Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certai Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match and debugging for the authentication backend has been enabled. This issue affects: * OTRS from 7.0.X through 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) C

CVE-2020-1773 [HIGH] CWE-331 CVE-2020-1773: An attacker with the ability to generate session IDs or password reset tokens, either by being able An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions.

CVE-2020-1772 [HIGH] CWE-155 CVE-2020-1772: It's possible to craft Lost Password requests with wildcards in the Token value, which allows attack It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue affects: ((OTRS)) Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.

CVE-2021-21441 [HIGH] CWE-79 CVE-2021-21441: There is a XSS vulnerability in the ticket overview screens. It's possible to collect various inform There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and l

CVE-2023-38056 [HIGH] CWE-78 CVE-2023-38056: Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. Schedu Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.

CVE-2022-39051 [HIGH] CWE-913 CVE-2022-39051: Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin i Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party package

CVE-2023-1250 [HIGH] CWE-20 CVE-2023-1250: Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Ed Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Edition (ACL modules) allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments and ACL-names This issue affects OTRS: from 7.0.X before 7.0.42, from 8.0.X before 8.0.31; ((OTRS)

CVE-2024-23793 [MEDIUM] CWE-22 CVE-2024-23793: The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. T The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl scripts. This issue affects OTRS: from 7.0.X through

CVE-2021-21440 [MEDIUM] CWE-200 CVE-2021-21440: Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. T Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions.

CVE-2026-48209 [HIGH] CWE-79 CVE-2026-48209: An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket h An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting (XSS) attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into manipulated request URLs, attackers can execute arbitrary

CVE-2026-48208 [MEDIUM] CWE-400 CVE-2026-48208: An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket articl An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when affected tickets are opened by an agent or customer. The issue can be exploited without Jav

CVE-2025-24389 [MEDIUM] CWE-532 CVE-2025-24389: Certain errors of the upstream libraries will insert sensitive information in the OTRS or ((OTRS)) C Certain errors of the upstream libraries will insert sensitive information in the OTRS or ((OTRS)) Community Edition log mechanism and mails send to the system administrator. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very li

CVE-2021-21439 [MEDIUM] CWE-754 CVE-2021-21439: DoS attack can be performed when an email contains specially designed URL in the body. It can lead t DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions;

CVE-2022-39052 [MEDIUM] CWE-835 CVE-2022-39052: An external attacker is able to send a specially crafted email (with many recipients) and trigger a An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system

CVE-2020-1766 [MEDIUM] CWE-79 CVE-2020-1766: Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to f Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted SVG file rendered as inline jpg file. This issue affects: ((OTRS)) Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and prior versions. OTRS 7.0