Vulnerability Description
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Otrs | Time Accounting | >= 7.0.0, < 7.0.20 |
Related Weaknesses (CWE)
References
- https://otrs.com/release-notes/otrs-security-advisory-2021-12/Vendor Advisory
- https://otrs.com/release-notes/otrs-security-advisory-2021-12/Vendor Advisory
FAQ
What is CVE-2021-21442?
CVE-2021-21442 is a vulnerability with a CVSS score of 4.5 (MEDIUM). In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x ver...
How severe is CVE-2021-21442?
CVE-2021-21442 has been rated MEDIUM with a CVSS base score of 4.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-21442?
Check the references section above for vendor advisories and patch information. Affected products include: Otrs Time Accounting.