CVE-2013-2637
MEDIUM 6.1EPSS 4.3%
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code.
- CVSS v3.1 NVD
- 6.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 4.30% chance of exploitation in the next 30 days, 91st percentile
- Published
- 2020-02-12
- Updated
- 2024-08-06
Proof-of-concept exploits (1)
ExploitDB entries (1)
Security advisories
- http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html
- http://www.securityfocus.com/bid/58930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83288