Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2021-36094

XSS attack in appointment edit popup screen

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG ((OTRS)) Community Edition

  • 6.0.1 to < 6.0.x*affected

OTRS AG OTRS

  • 7.0.x to ≤ 7.0.28affected

References