tocsin

Debian/otrs2: unknown

Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-m

Action: Upgrade otrs2 to 2.2.7-1 or later.

Affected

introducedfixedlast affected
02.2.7-1-

Fixed versions

2.2.7-1

Sources

published · modified · JSON