CVE-2014-1694

no score yetEPSS 1.5%

otrs otrs: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm, and (4) CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow remote attackers to hijack the authentication of arbitrary users for requests that (5) create tickets or (6) send follow-ups to existing tickets.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2014-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

otrs:otrs

References

http://bugs.otrs.org/show_bug.cgi?id=10099
http://osvdb.org/102632
http://secunia.com/advisories/56644
http://secunia.com/advisories/56655
http://www.debian.org/security/2014/dsa-2867

Check your stack JSON