Switch language to english
Znuny Professional Services

Der ((OTRS)) Community Edition Fork mit Langzeit-Support (LTS)

Überblick

ZSA-2025-07

Date
2025-04-30
Affected
All versions of Znuny LTS from 6.5.1 up to including 6.5.14. All versions of Znuny from 7.0.1 up to including 7.1.6. All versions of Znuny LTS 6.0.
Severity
medium
CVE
CVE-2025-43926

An agent with a valid session can elevate his permission via XSS by modifying his own preferences.

Thanks to Tim Püttmanns (maxence) for reporting the issue.