tocsin

Debian/otrs2: high 8.8

In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameter

Action: Upgrade otrs2 to 6.0.2-1 or later.

Affected

introducedfixedlast affected
06.0.2-1-

Fixed versions

6.0.2-1

Sources

published · modified · JSON