CVE-2024-23790

Summary

Improper Input Validation vulnerability in the upload functionality for user avatars allows functionality misuse due to missing check of filetypes. This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023 through 2023.1.1.

Affected Software

VendorProductVersion RangeStatus
OTRS AGOTRS8.0.x <= 8.0.37affected
OTRS AGOTRS2023 <= 2023.1.1affected
OTRS AGOTRS7.0.x <= 7.0.48affected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References