Vulnerability CVE-2022-39050

Vulnerability Name:

CVE-2022-39050 (CCN-235298)

Assigned:

2022-09-05

Published:

2022-09-05

Updated:

2022-09-08

Summary:

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external data sources e.g. database or ldap

CVSS v3 Severity:

4.8 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
4.6 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): Required
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

4.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)
4.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:H/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-79

Vulnerability Consequences:

Cross-Site Scripting

References:

Source: MITRE
Type: CNA
CVE-2022-39050

Source: XF
Type: UNKNOWN
otrs-cve202239050-xss(235298)

Source: CCN
Type: OTRS Security Advisory 2022-11
OSA-2022-11 Possible XSS stored in customer information (CVE-2022-39050)

Source: CONFIRM
Type: Vendor Advisory
https://otrs.com/release-notes/otrs-security-advisory-2022-11/

Vulnerable Configuration:

Configuration 1:

cpe:/a:otrs:otrs:*:*:*:*:community:*:*:* (Version >= 6.0.0 and <= 6.0.32)

OR cpe:/a:otrs:otrs:*:*:*:*:*:*:*:* (Version >= 8.0.0 and < 8.0.25)

OR cpe:/a:otrs:otrs:*:*:*:*:*:*:*:* (Version >= 7.0.0 and < 7.0.37)

Denotes that component is vulnerable

BACK