Security Advisory
CVE-2022-39049
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.