An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade otrs2 | Oct 15, 2018 | Aug 3, 2018 |
| Suse | — | Upgrade otrs-itsmUpgrade otrsUpgrade otrs-doc | Oct 5, 2018 | Aug 3, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 4, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub