CVE-2018-19142: Otrs Open Ticket Request System

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL.

Affected products

• Otrs Open Ticket Request System: from 6.0.0, before 6.0.13 (fixed in 6.0.13)

Published 2018-11-11. Last modified 2026-06-17.