GCVE - cpe:2.3:a:otrs:faq:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:otrs:faq:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Otrs (`265741d9-907d-5d62-a717-73ae1ea6326f`)
Product	Faq (`20238dfd-03ec-57dc-9f6d-61d761719efc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/otrs/faq`	purl2cpe	2026-06-01 10:13:48.053446

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21438`	vulnerable	2026-06-03 14:43:44.759353	FAQ articles are shown to users without permission LOW (3.5) Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions. Published: 2021-03-22T08:50:17.683Z Updated: 2024-09-17T01:46:15.159Z Open on db.gcve.eu Reference links https://otrs.com/release-notes/otrs-security-advisory-2021-08/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2637`	vulnerable	2026-06-03 14:33:03.168194	Details available A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code. Published: 2020-02-12T16:07:19.000Z Updated: 2024-08-06T15:44:32.659Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html http://www.securityfocus.com/bid/58930 http://www.exploit-db.com/exploits/24922 https://exchange.xforce.ibmcloud.com/vulnerabilities/83288	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2625`	vulnerable	2026-06-03 14:33:03.139881	Details available An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified Published: 2019-11-27T18:08:35.000Z Updated: 2024-08-06T15:44:32.364Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2013-2625 http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html http://archives.neohapsis.com/archives/bugtraq/2013-08/0009.html http://www.securityfocus.com/bid/58936 https://exchange.xforce.ibmcloud.com/vulnerabilities/83287	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.