What is the severity of CVE-2024-23793?

CVE-2024-23793 is considered a high-severity vulnerability due to its potential to allow the execution of malicious files on the server.

How do I fix CVE-2024-23793?

To fix CVE-2024-23793, patch your OTRS or ((OTRS)) Community Edition to the latest version that addresses this vulnerability.

Who is affected by CVE-2024-23793?

CVE-2024-23793 affects authenticated agents and customer users of OTRS and ((OTRS)) Community Edition versions listed in the affected software section.

What is the nature of the vulnerability in CVE-2024-23793?

CVE-2024-23793 is a path traversal vulnerability that allows unauthorized file uploads to directories accessible by the web server.

Can CVE-2024-23793 lead to remote code execution?

Yes, if exploited, CVE-2024-23793 can potentially lead to remote code execution on the affected server.

Vulnerability/
CVE-2024-23793

medium

6.3

CWE

6/6/2024

1/8/2024

CVE-2024-23793: Upload of files outside application directory

First published: Thu Jun 06 2024(Updated: )

The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl scripts. This issue affects OTRS: from 7.0.X through 7.0.49, 8.0.X, 2023.X, from 2024.X through 2024.3.2; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.

Credit: security@otrs.com

Affected Software	Affected Version	How to fix
OTRS	>=7.0.0<7.0.49>=8.0.X>=2023.X>=2024.0<2024.3.2
OTRS	>=6.0.1<6.0.34

Remedy

Update to OTRS 2024.4.3 or OTRS 7.0.50 (extended support only)

Never miss a vulnerability like this again

Reference Links

https://otrs.com/release-notes/otrs-security-advisory-2024-05/

Frequently Asked Questions

What is the severity of CVE-2024-23793?
CVE-2024-23793 is considered a high-severity vulnerability due to its potential to allow the execution of malicious files on the server.
How do I fix CVE-2024-23793?
To fix CVE-2024-23793, patch your OTRS or ((OTRS)) Community Edition to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-23793?
CVE-2024-23793 affects authenticated agents and customer users of OTRS and ((OTRS)) Community Edition versions listed in the affected software section.
What is the nature of the vulnerability in CVE-2024-23793?
CVE-2024-23793 is a path traversal vulnerability that allows unauthorized file uploads to directories accessible by the web server.
Can CVE-2024-23793 lead to remote code execution?
Yes, if exploited, CVE-2024-23793 can potentially lead to remote code execution on the affected server.

agent/title
agent/weakness
agent/remedy
agent/references
agent/first-publish-date
agent/type
agent/description
agent/severity
agent/author
agent/event
collector/nvd-api
source/NVD
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/softwarecombine
vendor/otrs
canonical/otrs

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.