CVE-2021-21442
XSS vulnerability in Time Accounting
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Affected products
OTRS AG · Time AccountingWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →