Otrs · Otrs · CVE-2018-14593
**Name of the Vulnerable Software and Affected Versions**
Open Ticket Request System (OTRS) versions 4.0.x through 4.0.30
Open Ticket Request System (OTRS) versions 5.0.x through 5.0.28
Open Ticket Request System (OTRS) versions 6.0.x through 6.0.9
**Description**
An issue was discovered that allows an attacker who is logged in as an agent to escalate their privileges by accessing a specially crafted URL.
**Recommendations**
For versions 4.0.x through 4.0.30, update to a version that contains a fix for this issue.
For versions 5.0.x through 5.0.28, update to a version that contains a fix for this issue.
For versions 6.0.x through 6.0.9, update to a version that contains a fix for this issue.