Switch language to english
Znuny Professional Services

Der ((OTRS)) Community Edition Fork mit Langzeit-Support (LTS)

Überblick

ZSA-2023-03

Date
2023-08-23
Affected
Znuny LTS up to including 6.5.3, Znuny 7 up to including 7.0.9. Please note that all older versions of Znuny, like 6.0.48 and ((OTRS) Community Edition (6.0.30), are also affected.
Severity
low
CVE
none

If the system configuration 'AdminCustomerUser::UseAutoComplete' is activated, JavaScript may be executed that is injected via the CustomerID.

Thanks to "Tim Püttmanns (maxence.de)" for reporting.