Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2022-0475

Possible XSS attack via translation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

Malicious translator is able to inject JavaScript code in few translatable strings (where HTML is allowed). The code could be executed in the Package manager. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.32 and prior versions, 8.0.x version: 8.0.19 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRS

  • 7.0.x to ≤ 7.0.32affected
  • 8.0.x to ≤ 8.0.19affected

References