Medium severity · published Mar 13, 2019
CVE-2019-9752
An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4
5.4
CVSS
1.1%
EPSS
No
On KEV
Description
An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Backports Sle · Opensuse
15.0; 15.0 · source: NVD
LE
Leap · Opensuse
15.1; 15.2 · source: NVD
OT
Otrs · Otrs
5.0.0 before 5.0.34; 6.0.0 before 6.0.16; 7.0.0 before 7.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-9752
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-9752
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
Patch
https://community.otrs.com/security-advisory-2019-01-security-update-for-otrs-framework
Mailing List
https://lists.debian.org/debian-lts-announce/2019/03/msg00023.html
More from Backports Sle
9.8
CVE-2020-12641
Roundcube Webmail Remote Code Execution Vulnerability
9.6
CVE-2020-15999
Google Chrome FreeType Heap Buffer Overflow Vulnerability
8.8
CVE-2020-16009
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2020-26935
An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3
9.8
CVE-2020-11800
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code