Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2019-9892

An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.

  • Published: May 22, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-9892
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
otrs / otrs 7.0.0 7.0.6.x
otrs / otrs 6.0.0 6.0.17.x
otrs / otrs 5.0.0 5.0.34.x
debian / debian_linux 8.0 8.0.x