An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade otrs2 | May 7, 2019 | May 7, 2019 |
| Suse | — | Upgrade otrsUpgrade otrs-docUpgrade otrs-itsm | Apr 26, 2020 | May 22, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub