← Back

CVE-2022-39051

nvd nist
Published: Sep 5, 2022Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party package

Affected (3)

Products: Otrs: Otrs
Otrs
1 product
Otrs
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Otrs
Otrs
From 7.0.0 to 7.0.37
Otrs
From 8.0.0 to 8.0.25
Otrs
From 6.0.0 to 6.0.32

Related CWEs

CWE-913
Improper Control of Dynamically-Managed Code Resources
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.

References (2)

Source: security@otrs.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.