Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OTRS ITSM/FAQ模块跨站脚本漏洞
Vulnerability Description
OTRS ITSM是德国OTRS集团的一套IT服务管理组织的基础解决方案。该方案以ITIL最佳实践为基础，提供请求和故障管理、问题管理、变更管理和发布管理的管理工具。 OTRS的OTRS ITSM和FAQ模块中存在漏洞，该漏洞允许攻击者绕过特定的安全限制，并实施脚本插入攻击。拥有对write changes, workorder items或FAQ文章访问权限的攻击者可利用该漏洞注入恶意脚本，当用户查看恶意的数据时，恶意脚本会执行。以下产品和版本中存在漏洞：OTRS ITSM 3.2.3、3.1.8、3.
CVSS Information
N/A
Vulnerability Type
N/A