CVE-2022-39049: Otrs

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.

Affected products

• Otrs Otrs: from 6.0.0, up to and including 6.0.32; from 7.0.0, before 7.0.37 (fixed in 7.0.37); from 8.0.0, before 8.0.25 (fixed in 8.0.25)

Published 2022-09-05. Last modified 2026-06-17.