Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Possible XSS attack via translation
Vulnerability Description
Malicious translator is able to inject JavaScript code in few translatable strings (where HTML is allowed). The code could be executed in the Package manager. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.32 and prior versions, 8.0.x version: 8.0.19 and prior versions.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
OTRS 跨站脚本漏洞
Vulnerability Description
OTRS是德国 （OTRS）公司的一个应用软件。一个服务管理软件。 OTRS 存在安全漏洞，该漏洞源于翻译器对于少数可翻译字符串缺少过滤和转义。攻击者可以发送特殊代码利用该漏洞执行JavaScript代码。此漏洞影响以下产品：OTRS AG OTRS 7.0.x 到7.0.32 版本，8.0.x 版本到8.0.19版本。
CVSS Information
N/A
Vulnerability Type
N/A