XSS in Otrs Faq
CVE-2013-2637
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.043 (90.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Otrs Faq
- Otrs Otrs_itsm
- Opensuse — versions 12.2, 12.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Mailing List, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2013-2637?
- CVE-2013-2637 is a medium-severity vulnerability in Otrs Faq, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-02-12.
- How severe is CVE-2013-2637?
- Medium severity. CVSS v3 base score is 6.1 out of 10.