CVE-2022-4427
Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTR ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD.
Açıklama
Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7.0.1 before 7.0.40 Patch 1, from 8.0.1 before 8.0.28 Patch 1; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 10 | otrs2 | 6.0.16-2+deb10u1 |
| debian 11 | otrs2 | düzeltme belirtilmemiş |
| debian 12 | znuny | 6.4.5-1 |
| debian 13 | znuny | 6.4.5-1 |
| debian 14 | znuny | 6.4.5-1 |
| echo | znuny | 6.4.5-1 |