CVE-2023-38056

Published: 2023-07-24T09:15Z

Last Modified: 2024-11-21T08:12Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt