CVE-2018-19141

—

CVSS 3.0

4.8 medium

EPSS

<1%p50

Published

Nov 11, 2018 (Nov 11, 2018)

Modified

Jun 17, 2026

Description

Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled.

Vendors: otrs debian
Products: open ticket request system, debian linux
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.