Approved changes feed: RSS · Atom

cpe:2.3:a:otrs:time_accounting:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOtrs (265741d9-907d-5d62-a717-73ae1ea6326f)
ProductTime Accounting (42a16596-c0bf-55bb-85aa-be0c607d48b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/otrs/timeaccounting purl2cpe 2026-06-01 10:13:47.723690

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21442 vulnerable 2026-06-03 14:43:44.766669 XSS vulnerability in Time Accounting
MEDIUM (4.5)
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19.
Published: 2021-07-26T04:25:38.681Z
Updated: 2024-09-16T20:17:22.058Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.