CVE-2017-9299

Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as demonstrated by OrderBy=[XSS] and Direction=[XSS] attacks. NOTE: this CVE may have limited relevance because it represents a 2017 discovery of an issue in software from 2014. The 3.3.20 release, for example, is not affected.
References
Link Resource
http://code610.blogspot.com/2017/05/turnkey-feat-otrs.html Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:otrs:otrs:3.3.9:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-05-29 19:29

Updated : 2024-02-04 19:29


NVD link : CVE-2017-9299

Mitre link : CVE-2017-9299

CVE.ORG link : CVE-2017-9299


JSON object : View

Products Affected

otrs

  • otrs
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')