Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-23793

Upload of files outside application directory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl scripts. This issue affects OTRS: from 7.0.X through 7.0.49, 8.0.X, 2023.X, from 2024.X through 2024.3.2; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRS

Default version status: affected

  • 7.0.x to ≤ 7.0.49affected
  • 8.0.xaffected
  • 2023.xaffected
  • 2024.x to ≤ 2024.3.2affected

OTRS AG ((OTRS)) Community Edition

Default version status: affected

  • 6.0.1 to ≤ 6.0.34affected

References