CVE-2018-19143: Medium severity OTRS Open Ticket Request System vulnerability
Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19143?
CVE-2018-19143 is classified as a medium severity vulnerability due to its potential impact on file deletion by authenticated users.
How do I fix CVE-2018-19143?
To fix CVE-2018-19143, upgrade to OTRS 4.0.33, 5.0.31, or 6.0.13 or later versions.
What versions of OTRS are affected by CVE-2018-19143?
CVE-2018-19143 affects OTRS versions 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13.
Can authenticated users exploit CVE-2018-19143?
Yes, CVE-2018-19143 allows authenticated users to exploit the vulnerability to delete files due to mishandled upload caching.
Is there a patch available for CVE-2018-19143?
Yes, a security update is available that addresses CVE-2018-19143 by providing patched versions of OTRS.