Sprache wechseln auf deutsch
Znuny Professional Services

The ((OTRS)) Community Edition Fork with long-term Support (LTS)

Overview

ZSA-2024-03

A logged-in agent is able to inject SQL in the draft form ID parameter of an AJAX request.

Thanks to Martino Spagnuolo for reporting.