CVE-2026-48208

{"id": "CVE-2026-48208", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48208", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-01T13:19:13.837405Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@otrs.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@otrs.com", "affectedData": [{"vendor": "OTRS AG", "modules": ["Agent Frontend", "External Interface"], "product": "OTRS", "versions": [{"status": "affected", "version": "7.0.x"}, {"status": "affected", "version": "8.0.x"}, {"status": "affected", "version": "2023.x"}, {"status": "affected", "version": "2024.x"}, {"status": "affected", "version": "2025.x"}, {"status": "affected", "version": "2026.x", "versionType": "patch", "lessThanOrEqual": "2026.3.x"}], "defaultStatus": "affected"}, {"vendor": "OTRS AG", "modules": ["Agent Frontend", "External Interface"], "product": "((OTRS)) Community Edition", "versions": [{"status": "affected", "version": "6.x"}], "defaultStatus": "affected"}]}], "published": "2026-06-01T04:16:23.123", "references": [{"url": "https://otrs.com/release-notes/otrs-security-advisory-2026-07/", "tags": ["Vendor Advisory"], "source": "security@otrs.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@otrs.com", "description": [{"lang": "en", "value": "CWE-400"}, {"lang": "en", "value": "CWE-791"}]}], "descriptions": [{"lang": "en", "value": "An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when affected tickets are opened by an agent or customer. The issue can be exploited without JavaScript execution and is not mitigated by the configured Content Security Policy (CSP).\n\nThis issue affects OTRS:\n\n * 7.0.X\n * 8.0.X\n * 2023.X\n * 2024.X\n * 2025.X\n * 2026.X before 2026.4.X\n\nPlease note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected"}, {"lang": "es", "value": "Una neutralizaci\u00f3n inadecuada de contenido SVG activo en la representaci\u00f3n de art\u00edculos de tickets de OTRS o ((OTRS)) Community Edition permite a los atacantes inyectar cargas \u00fatiles SVG especialmente dise\u00f1adas a trav\u00e9s del contenido del correo electr\u00f3nico, lo que lleva al agotamiento de recursos del lado del navegador y a la denegaci\u00f3n de servicio cuando los tickets afectados son abiertos por un agente o cliente. El problema puede ser explotado sin ejecuci\u00f3n de JavaScript y no es mitigado por la Pol\u00edtica de Seguridad de Contenido (CSP) configurada.\n\nEste problema afecta a OTRS:\n\n * 7.0.X\n * 8.0.X\n * 2023.X\n * 2024.X\n * 2025.X\n * 2026.X antes de 2026.4.X\n\nTenga en cuenta que ((OTRS)) Community Edition 6.x y versiones anteriores son vulnerables. Los productos basados en ((OTRS)) Community Edition tambi\u00e9n son muy propensos a ser afectados."}], "lastModified": "2026-07-22T07:10:00.107", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:otrs:otrs:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "5421FAF4-D702-4429-A186-6374A4306293", "versionEndIncluding": "6.0.32"}, {"criteria": "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "650E99BF-9E05-496F-BD59-5542A95FD221", "versionEndIncluding": "8.0.37", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "476B2F02-24EA-43BB-BEA8-282D7D71B386", "versionEndExcluding": "2026.4.1", "versionStartIncluding": "2023.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@otrs.com"}