CVE-2022-39049
No fix known EPSS <1%CVSS 3.5
An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.
Products: OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 24.04 LTS | znuny | no fix |
| Ubuntu 25.10 | znuny | no fix |
| Ubuntu 26.04 LTS | znuny | no fix |
| Ubuntu 26.10 | znuny | no fix |