Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-4427

SQL Injection via OTRS Search API

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7.0.1 before 7.0.40 Patch 1, from 8.0.1 before 8.0.28 Patch 1; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRS

Default version status: affected

  • 7.0.1 to < 7.0.40 Patch 1affected
  • 8.0.1 to < 8.0.28 Patch 1affected

OTRS AG ((OTRS)) Community Edition

Default version status: affected

  • 6.0.1 to ≤ 6.0.34affected

References