CLEANSTART-2024-CK19682

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-CK19682.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-CK19682
Upstream
Published
2026-10-31T14:36:01Z
Modified
2026-10-31T15:46:22Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted SVG file rendered ...
Details

Security vulnerability affects the otrs package. Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted SVG file rendered as inline jpg file.

References

Affected packages

CleanStart / otrs

Package

Name
otrs
Purl
pkg:apk/cleanstart/otrs?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.0.33-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-CK19682.json"