CVE-2019-9892

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-91

Affected software

No affected versions have been published.

Timeline

Published
May 22, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-98939.8libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), whicCVE-2019-98947.5A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.CVE-2019-98959.8In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.CVE-2019-98967.8In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directorCVE-2019-98977.5Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.CVE-2019-98989.8Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.CVE-2019-99008.3When parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote atCVE-2019-990110.0Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., something/../admin, to bypass aCVE-2019-99036.5PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() locatedCVE-2019-99046.5An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lCVE-2019-99086.1The font-organizer plugin 2.1.1 for WordPress has wp-admin/options-general.php manage_font_id XSS.CVE-2019-99096.1The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS.