CVE-2022-39051: Otrs

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party package

Affected products

• Otrs Otrs: from 6.0.0, up to and including 6.0.32; from 7.0.0, before 7.0.37 (fixed in 7.0.37); from 8.0.0, before 8.0.25 (fixed in 8.0.25)

Published 2022-09-05. Last modified 2026-06-17.