Cross-Site Request Forgery in Import/Export Admin console
CVSS score
5.4
EPSS probability
%0.1
Risk score
0.0
Published
10 h ago
Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.
Impact on My Inventory
Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.
Checking session…
Vulnerability description
CVE AI research
DayBreach AI Explanation
Verified against sourcesSources read
2
Source agreement
Tam uyum
Evidence confidence
%63
Short explanation
A Cross-Site Request Forgery (CSRF) vulnerability exists in OTRS due to the AdminImportExport::TemplateDelete action failing to validate the request's ChallengeToken. An unauthenticated remote attacker can trick an authenticated administrator into executing a malicious request, resulting in the deletion of administrative Import/Export templates.
This vulnerability allows an unauthenticated remote attacker to perform a CSRF attack and delete administrative templates leveraging an active administrator session, impacting integrity and availability.
What should be done?
- Consult the vendor security advisory
- Follow vendor advisories for updates
Chain of evidence and sources
OTRS AdminImportExport::TemplateDelete eylemi istek içerisindeki ChallengeToken değerini doğrulamamaktadır.
Kimliği doğrulanmamış uzaktaki bir saldırgan, aktif bir yönetici oturumunun ayrıcalıklarıyla şablonların silinmesine yol açabilir.
Zafiyet OTRS 7.0.X, 8.0.X, 2023.X, 2024.X, 2025.X ve 2026.7.X öncesi 2026.X sürümlerini etkilemektedir.
Show the technical text from the sources
An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a malicious request that is executed with the privileges of an active administrator session. This issue affects OTRS: * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CWE: CWE-352
Explanation produced with the local gemini-flash-lite-latest model. Numerical metrics and the KEV, patch and exploit statuses are not determined by AI.
IMPACT: Affected Products and Software
RED HAT CSAF/VEX: Product Impact Check
SCORING: CVSS from Multiple Sources
CVSS Scores
The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 5.4 | CVSS V3_1 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L | CVE CNA |
| 5.4 | CVSS V31 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L | NVD |
Patch and Remediation Guide
Solution & Remediation Advisory
İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.
Public exploit and active exploitation status
Verified exploit intelligence
No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.
Weakness Classification and Attack Patterns (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-48211 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-48211 weaknesses.
Attack Vector and Accessibility
Official Sources and Advisories
CVSS Vector Radar Chart
5.4 / 10Vulnerability Scoring Details
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:LYama durumu bilinmiyor
Weakness Type (CWE & CAPEC)
Similar Vulnerabilities
Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory
Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication
Insufficient Session Revocation for JWT Authentication
Unauthenticated Disclosure of Agent Frontend Configuration
Insufficient Neutralization of Formula Elements in CSV Exports
Duplicate Identity / Identity Shadowing across CustomerUser backends
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-48211"