Debian/otrs2: high 8.8
In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain admin
Action: Upgrade otrs2 to 5.0.20-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.20-1 | - |
Fixed versions
| 5.0.20-1 |
Sources
published · modified · JSON