What is CVE-2018-20800?

CVE-2018-20800 is a medium-severity vulnerability in Otrs, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2019-03-13.

How severe is CVE-2018-20800?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Improper input validation in Otrs

CVE-2018-20800

An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major updates) will experience data loss in their agent preferences table.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (58.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Otrs — versions 5.0.31, 6.0.13
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (Patch, x_refsource_MISC, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2018-20800?: CVE-2018-20800 is a medium-severity vulnerability in Otrs, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2019-03-13.
How severe is CVE-2018-20800?: Medium severity. CVSS v3 base score is 6.5 out of 10.