Sprache wechseln auf deutsch
Znuny Professional Services

The ((OTRS)) Community Edition Fork with long-term Support (LTS)

Overview

ZSA-2025-07

Date
2025-04-30
Affected
All versions of Znuny LTS from 6.5.1 up to including 6.5.14. All versions of Znuny from 7.0.1 up to including 7.1.6. All versions of Znuny LTS 6.0.
Severity
medium
CVE
CVE-2025-43926

An agent with a valid session can elevate his permission via XSS by modifying his own preferences.

Thanks to Tim Püttmanns (maxence) for reporting the issue.