((Otrs)) Community Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:otrs_ag:((otrs))_community_edition:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Otrs Ag (9a52b612-284c-5871-a0c1-b1fbdb0057b3) |
|---|---|
| Product | ((Otrs)) Community Edition (a58da450-dacd-5e22-a261-6db7653f5d6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-48209 |
vulnerable | 2026-06-08 08:05:12.267567 |
Reflected XSS in authenticated agent context
HIGH (7.1)
An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting (XSS) attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into manipulated request URLs, attackers can execute arbitrary script code in the context of an authenticated agent session when the crafted link is opened.
This issue affects OTRS:
* 7.0.x
Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected
Published: 2026-06-01T03:32:28.473Z
Updated: 2026-06-01T13:19:45.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48208 |
vulnerable | 2026-06-08 08:05:12.267332 |
Denial-of-Service via SVG Rendering in Ticket
MEDIUM (6.5)
An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when affected tickets are opened by an agent or customer. The issue can be exploited without JavaScript execution and is not mitigated by the configured Content Security Policy (CSP).
This issue affects OTRS:
* 7.0.X
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.4.X
Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected
Published: 2026-06-01T03:32:38.926Z
Updated: 2026-06-01T13:19:22.939Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48188 |
vulnerable | 2026-06-08 08:05:12.264310 |
SQL Injection via MySQL Quote Method
CRITICAL (9.1)
An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is configured with the NO_BACKSLASH_ESCAPES SQL mode.
This issue affects OTRS:
* 7.0.X
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.4.X
* (OTRS)) Community Edition: 6.0.x
Products based on the ((OTRS)) Community Edition also very likely to be affected
Published: 2026-06-01T03:33:15.822Z
Updated: 2026-06-01T13:17:31.447Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48187 |
under_investigation | 2026-06-08 08:05:12.263945 |
Email with special content can lead to DoS
MEDIUM (5.7)
An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS:
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.4.X
Please note that ((OTRS)) Community Edition 6.x, OTRS 7.x and products based on the ((OTRS)) Community Edition also very likely to be affected
Published: 2026-06-01T03:33:23.990Z
Updated: 2026-06-01T13:17:04.742Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24389 |
vulnerable | 2026-06-08 07:12:48.554242 |
SMTP Password will be shown in cleartext on some SMTP errors
MEDIUM (6.3)
Certain errors of the upstream libraries will insert sensitive information in the OTRS or ((OTRS)) Community Edition log mechanism and mails send to the system administrator.
This issue affects:
* OTRS 7.0.X
* OTRS 8.0.X
* OTRS 2023.X
* OTRS 2024.X
* ((OTRS)) Community Edition: 6.0.x
Products based on the ((OTRS)) Community Edition also very likely to be affected
Published: 2025-01-27T05:59:01.064Z
Updated: 2025-02-12T20:41:31.676Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24388 |
vulnerable | 2026-06-08 07:12:48.553794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43446 |
vulnerable | 2026-06-08 06:45:51.340985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43445 |
vulnerable | 2026-06-08 06:45:51.340407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43444 |
vulnerable | 2026-06-08 06:45:51.339997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43443 |
vulnerable | 2026-06-08 06:45:51.337374 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43442 |
vulnerable | 2026-06-08 06:45:51.336886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23793 |
vulnerable | 2026-06-08 06:29:40.455132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5422 |
vulnerable | 2026-06-08 06:19:43.570967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5421 |
vulnerable | 2026-06-08 06:19:43.567429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38060 |
vulnerable | 2026-06-08 06:08:16.834739 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38059 |
vulnerable | 2026-06-08 06:08:16.834067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38057 |
vulnerable | 2026-06-08 06:08:16.830357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38056 |
vulnerable | 2026-06-08 06:08:16.827966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1250 |
vulnerable | 2026-06-08 05:52:34.180813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1248 |
vulnerable | 2026-06-08 05:52:34.178364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4427 |
vulnerable | 2026-06-08 05:51:37.439849 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39052 |
vulnerable | 2026-06-08 05:47:17.812715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39051 |
vulnerable | 2026-06-08 05:47:17.811970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39050 |
vulnerable | 2026-06-08 05:47:17.811411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39049 |
vulnerable | 2026-06-08 05:47:17.809473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36100 |
vulnerable | 2026-06-08 05:32:49.753813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36096 |
vulnerable | 2026-06-08 05:32:49.748980 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36095 |
vulnerable | 2026-06-08 05:32:49.748271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36094 |
vulnerable | 2026-06-08 05:32:49.747721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36093 |
vulnerable | 2026-06-08 05:32:49.745624 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36092 |
vulnerable | 2026-06-08 05:32:49.744883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36091 |
vulnerable | 2026-06-08 05:32:49.741516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21443 |
vulnerable | 2026-06-08 05:29:12.030633 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21441 |
vulnerable | 2026-06-08 05:29:12.027466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21440 |
vulnerable | 2026-06-08 05:29:12.027066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21439 |
vulnerable | 2026-06-08 05:29:12.026572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1776 |
vulnerable | 2026-06-08 05:21:03.016875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1774 |
vulnerable | 2026-06-08 05:21:03.015967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1773 |
vulnerable | 2026-06-08 05:21:03.015554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1772 |
vulnerable | 2026-06-08 05:21:03.015004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1771 |
vulnerable | 2026-06-08 05:21:03.014496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1770 |
vulnerable | 2026-06-08 05:21:03.013746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1769 |
vulnerable | 2026-06-08 05:21:03.012895 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1767 |
vulnerable | 2026-06-08 05:21:03.011814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1766 |
vulnerable | 2026-06-08 05:21:03.011223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1765 |
vulnerable | 2026-06-08 05:21:03.005824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.