p PatchFirst

CVE-2022-39051

CVE-2022-39051 · Perl Code execution in Template Toolkit

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party package

CVSS 6.8 · Medium · EPSS 0.8%

Published
Updated

Stack: system

Affected products and versions

  • otrs

    Versions
    • 7.0.x 7.0.36: Affected
    • 8.0.x 8.0.24: Affected

    No fix published

  • ((otrs)) community edition

    Versions
    • ≥ 6.0.1, < 6.0.x*: Affected (custom)

    No fix published

  • znuny Ubuntu:24.04:LTS

    Versions
    • 6.5.3-1
    • 6.5.4-1
    • 6.5.5-1
    • 6.5.6-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:25.10

    Versions
    • 6.5.14-1
    • 6.5.15-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:26.10

    Versions
    • 6.5.18-1
    • 6.5.20-1
    • 6.5.21-1
    • 6.5.22-1
    • 6.5.23-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:26.04:LTS

    Versions
    • 6.5.15-2
    • 6.5.18-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →