CVE-2021-36092
CVE-2021-36092 · XSS attack using special link in email
This page contains facts from public vulnerability sources. Check the original advisory before updating.
It's possible to create an email which contains specially crafted link and it can be used to perform XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition:6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions.
CVSS 6.5 · Medium · EPSS 0.7%
- Published
- Updated
Stack: system
Affected products and versions
((otrs)) community edition
- Versions
- ≥ 6.0.1, < 6.0.x*: Affected (custom)
No fix published
otrs
- Versions
- ≥ 7.0.x, ≤ 7.0.27: Affected (custom)
- ≥ 8.0.x, ≤ 8.0.14: Affected (custom)
No fix published
otrs2 Ubuntu:16.04:LTS
- Versions
- 4.0.10-1
- 5.0.1-1
- 5.0.1-2
- 5.0.2-1
- 5.0.3-1
- 5.0.5-1
- 5.0.6-1
- 5.0.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:18.04:LTS
- Versions
- 5.0.23-1
- 5.0.24-1
- 6.0.1-1
- 6.0.2-1
- 6.0.3-1
- 6.0.4-1
- 6.0.5-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:20.04:LTS
- Versions
- 6.0.20-1
- 6.0.23-2
- 6.0.24-1
- 6.0.25-1
- 6.0.25-2
- 6.0.25-3
- 6.0.26-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:22.04:LTS
- Versions
- 6.0.32-6
- 6.1.2-1
- 6.2.1-1
- 6.2.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published