Bug 24419

Summary:	AgentTicketZoom is vulnerable to XSS attacks from HTML e-mails
Product:	Sisyphus	Reporter:	Vladimir Lettiev <crux>
Component:	otrs	Assignee:	Sergey Y. Afonin <asy>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	blocker
Priority:	P3	CC:	asy, zidex
Version:	unstable	Keywords:	security
Hardware:	all
OS:	Linux
URL:	http://otrs.org/advisory/OSA-2010-03-en/

Description

Vladimir Lettiev 2010-10-25 15:56:54 MSD

Whenever a customer sends an HTML e-mail and RichText is enabled in OTRS, javascript contained in the email can do everything in the OTRS agent interface that the agent himself could do.
Most relevant is that this type of exploit can be used in such a way that the agent won't even detect he is being exploited.
Affected by this vulnerability are all releases of OTRS 2.4.x up to and including 2.4.8.

This vulnerability is fixed in OTRS 2.4.9.

Comment 1

Repository Robot 2010-10-25 21:36:37 MSD

otrs-2.4.9-alt1 -> sisyphus:

* Mon Oct 25 2010 Pavel Zilke <zidex at altlinux> 2.4.9-alt1
- Security fixes:
  + AgentTicketZoom is vulnerable to XSS attacks from HTML e-mails; OSA-2010-03 (ALT #24419)