{"id":"CVE-2024-23793","state":"PUBLISHED","title":"Upload of files outside application directory","description":"The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl scripts.\nThis issue affects OTRS: from 7.0.X through 7.0.49, 8.0.X, 2023.X, from 2024.X through 2024.3.2; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.\n\n","publishedAt":"2024-06-06T18:06:58.805Z","updatedAt":"2024-08-01T23:13:07.327Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","source":"OTRS"},"assigner":"OTRS","products":["OTRS AG OTRS","OTRS AG ((OTRS)) Community Edition"],"affected":[{"vendor":"OTRS AG","product":"OTRS","defaultStatus":"affected","versions":[{"version":"7.0.x","status":"affected","lessThanOrEqual":"7.0.49","versionType":"Patch"},{"version":"8.0.x","status":"affected"},{"version":"2023.x","status":"affected"},{"version":"2024.x","status":"affected","lessThanOrEqual":"2024.3.2","versionType":"Patch"}],"modules":["File Upload"]},{"vendor":"OTRS AG","product":"((OTRS)) Community Edition","defaultStatus":"affected","versions":[{"version":"6.0.1","status":"affected","lessThanOrEqual":"6.0.34","versionType":"All"}]}],"references":["https://otrs.com/release-notes/otrs-security-advisory-2024-05/"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/23xxx/CVE-2024-23793.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-23793","state":"PUBLISHED","datePublished":"2024-06-06T18:06:58.805Z","dateUpdated":"2024-08-01T23:13:07.327Z","assignerShortName":"OTRS","assignerOrgId":"2e1bf29f-dc29-4ed8-830c-7b9348b6f0e8","dateReserved":"2024-01-22T10:32:00.704Z"},"containers":{"cna":{"title":"Upload of files outside application directory","descriptions":[{"lang":"en","value":"The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl scripts.\nThis issue affects OTRS: from 7.0.X through 7.0.49, 8.0.X, 2023.X, from 2024.X through 2024.3.2; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.\n\n"}],"affected":[{"vendor":"OTRS AG","product":"OTRS","defaultStatus":"affected","versions":[{"version":"7.0.x","status":"affected","lessThanOrEqual":"7.0.49","versionType":"Patch"},{"version":"8.0.x","status":"affected"},{"version":"2023.x","status":"affected"},{"version":"2024.x","status":"affected","lessThanOrEqual":"2024.3.2","versionType":"Patch"}],"modules":["File Upload"]},{"vendor":"OTRS AG","product":"((OTRS)) Community Edition","defaultStatus":"affected","versions":[{"version":"6.0.1","status":"affected","lessThanOrEqual":"6.0.34","versionType":"All"}]}],"references":[{"url":"https://otrs.com/release-notes/otrs-security-advisory-2024-05/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"OTRS","orgId":"2e1bf29f-dc29-4ed8-830c-7b9348b6f0e8","dateUpdated":"2024-06-06T18:06:58.805Z"},"datePublic":"2024-06-03T07:00:00.000Z","impacts":[{"capecId":"CAPEC-17","descriptions":[{"lang":"en","value":"CAPEC-17 Using Malicious Files"}]},{"capecId":"CAPEC-549","descriptions":[{"lang":"en","value":"CAPEC-549 Local Execution of Code"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update to OTRS&nbsp;2024.4.3 or OTRS 7.0.50 (extended support only)<br>"}],"value":"Update to OTRS 2024.4.3 or OTRS 7.0.50 (extended support only)\n"}],"source":{"advisory":"OSA-2024-05","defect":["Issue#2411"],"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"otrs","product":"otrs","defaultStatus":"affected","versions":[{"version":"7.0.x","status":"affected","lessThan":"7.0.49","versionType":"custom"},{"version":"8.0.x","status":"affected"},{"version":"2023.x","status":"affected"},{"version":"2024.x","status":"affected","lessThan":"2024.3.2","versionType":"custom"}],"cpes":["cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*"]},{"vendor":"otrs","product":"otrs_community_edition","defaultStatus":"affected","versions":[{"version":"6.0.1","status":"affected","lessThan":"6.0.34","versionType":"custom"}],"cpes":["cpe:2.3:a:otrs:otrs_community_edition:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-06T20:07:44.167335Z","id":"CVE-2024-23793","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-06T20:22:49.508Z"}},{"title":"CVE Program Container","references":[{"url":"https://otrs.com/release-notes/otrs-security-advisory-2024-05/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T23:13:07.327Z"}}]}}}