Security Advisory

CVE-2024-23790

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-01-29 09:21:14

Last updated 2025-06-17 21:29:17

Assigner OTRS

CVSS score 3.5

State PUBLISHED

Description

Improper Input Validation vulnerability in the upload functionality for user avatars allows functionality misuse due to missing check of filetypes. This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023 through 2023.1.1.

← Browse all CVEs View on cve.org ↗