CVE-2023-5421

Summary

CVE-2023-5421 is a vulnerability in OTRS (Open-Source Ticket Request System) that allows an attacker, who has privileges to create and modify customer user data, to execute JavaScript code immediately after saving data. This occurs if the configuration for AdminCustomerUser::UseAutoComplete has been altered. The vulnerability affects OTRS versions from 7.0.X before 7.0.47, 8.0.X before 8.0.37, and the Community Edition versions from 6.0.X through 6.0.34.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.