What’s Vulnerable › Vulnerabilities

CVE-2022-0475: Possible XSS attack via translation

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-21 · updated 2026-06-17
• Weakness: CWE-79

Description

Malicious translator is able to inject JavaScript code in few translatable strings (where HTML is allowed). The code could be executed in the Package manager. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.32 and prior versions, 8.0.x version: 8.0.19 and prior versions.

Affected products

• OTRS AG OTRS: from 7.0.0 through 7.0.32; from 8.0.0 through 8.0.19

References

• https://otrs.com/release-notes/otrs-security-advisory-2022-05/
• https://otrs.com/release-notes/otrs-security-advisory-2022-05/

Get alerted when CVE-2022-0475 or the next vulnerability affects your stack