OTRS is prone to multiple cross-site scripting vulnerabilities and a denial-of-service vulnerability

An attacker may leverage these issues to cause denial-of-service conditions or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Impact Level: Application

Upgrade to OTRS (Open Ticket Request System) higher than 2.3.6 or 2.4.8 or later, For updates refer to http://www.otrs.com/en/ or Apply patch from the vendor advisory link http://otrs.org/advisory/OSA-2010-02-en/

An error exists in application which fails to properly handle user-supplied input.

OTRS versions prior to 2.3.6 and 2.4.8 are vulnerable.

Get the installed version of OTRS with the help of detect NVT and check the version is vulnerable or not.

• http://otrs.org/
• http://otrs.org/advisory/OSA-2010-02-en/
• https://www.securityfocus.com/bid/43264

---

Updated on 2015-03-25