CVE-2022-39049
CVE-2022-39049 · Possible XSS in Admin Interface
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.
CVSS 3.5 · Low · EPSS 0.6%
- Published
- Updated
Stack: system
Affected products and versions
otrs
- Versions
- ≥ 7.0.x, ≤ 7.0.36: Affected (custom)
- ≥ 8.0.x, ≤ 8.0.24: Affected (custom)
No fix published
((otrs)) community edition
- Versions
- ≥ 6.0.1, < 6.0.x*: Affected (custom)
No fix published
znuny Ubuntu:24.04:LTS
- Versions
- 6.5.3-1
- 6.5.4-1
- 6.5.5-1
- 6.5.6-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
znuny Ubuntu:25.10
- Versions
- 6.5.14-1
- 6.5.15-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
znuny Ubuntu:26.10
- Versions
- 6.5.18-1
- 6.5.20-1
- 6.5.21-1
- 6.5.22-1
- 6.5.23-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
znuny Ubuntu:26.04:LTS
- Versions
- 6.5.15-2
- 6.5.18-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published