Loading HuntDB...

GHSA-95r5-www7-mhrx

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19.

Related CVEs

Key Information

GHSA ID
GHSA-95r5-www7-mhrx
Published
May 24, 2022 7:09 PM
Last Modified
May 24, 2022 7:09 PM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 6, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.