Approved changes feed: RSS · Atom

cpe:2.3:a:otrs_ag:time_accounting:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOtrs Ag (9a52b612-284c-5871-a0c1-b1fbdb0057b3)
ProductTime Accounting (479d9c87-bc66-5fdc-bf4d-c9c83069d183)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21442 vulnerable 2026-06-08 05:29:12.029665 XSS vulnerability in Time Accounting
MEDIUM (4.5)
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19.
Published: 2021-07-26T04:25:38.681Z
Updated: 2024-09-16T20:17:22.058Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.