CVE-2018-17883
otrs2: An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12
CVE-2018-17883 is fixed in otrs2 on 1 platform by DEBIAN-CVE-2018-17883 (version 6.0.12-1), released April 16, 2023. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
6.1
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0047
41st percentile
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker could send an e-mail message with a malicious link to an OTRS system or an agent. If a logged-in agent opens this link, it could cause the execution of JavaScript in the context of OTRS.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| otrs2 · Debian 11.6 (bullseye) | 6.0.12-1 | DEBIAN-CVE-2018-17883 | Apr 16, 2023 |