Sprache wechseln auf deutsch
Znuny Professional Services

The ((OTRS)) Community Edition Fork with long-term Support (LTS)

Overview

ZSA-2023-03

Date
2023-08-23
Affected
Znuny LTS up to including 6.5.3, Znuny 7 up to including 7.0.9. Please note that all older versions of Znuny, like 6.0.48 and ((OTRS) Community Edition (6.0.30), are also affected.
Severity
low
CVE
none

If the system configuration 'AdminCustomerUser::UseAutoComplete' is activated, JavaScript may be executed that is injected via the CustomerID.

Thanks to "Tim Püttmanns (maxence.de)" for reporting.