tocsin

Debian/otrs2: unknown

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow remote authenticated users to inject arbitrary web script or HT

Action: Upgrade otrs2 to 2.4.8+dfsg1-1 or later.

Affected

introducedfixedlast affected
02.4.8+dfsg1-1-

Fixed versions

2.4.8+dfsg1-1

Sources

published · modified · JSON