tocsin

Debian/otrs2: unknown

The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users t

Action: Upgrade otrs2 to 3.0.8+dfsg1-1 or later.

Affected

introducedfixedlast affected
03.0.8+dfsg1-1-

Fixed versions

3.0.8+dfsg1-1

Sources

published · modified · JSON