CVE-2013-2637: XSS
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2637?
The severity of CVE-2013-2637 is medium with a CVSS score of 6.1.
What is CVE-2013-2637?
CVE-2013-2637 is a Cross-Site Scripting (XSS) vulnerability that exists in OTRS ITSM prior to versions 3.2.4, 3.1.8, and 3.0.7, and FAQ prior to versions 2.1.4 and 2.0.8.
How can a remote malicious user exploit CVE-2013-2637?
A remote malicious user can exploit CVE-2013-2637 by executing arbitrary code through changes, workorder items, and FAQ articles in the affected OTRS ITSM and FAQ versions.
What software versions are affected by CVE-2013-2637?
OTRS ITSM versions prior to 3.2.4, 3.1.8, and 3.0.7, and FAQ versions prior to 2.1.4 and 2.0.8 are affected by CVE-2013-2637.
How can CVE-2013-2637 be fixed?
To fix CVE-2013-2637, it is recommended to upgrade OTRS ITSM to version 3.2.4, 3.1.8, or 3.0.7, and FAQ to version 2.1.4 or 2.0.8.