tocsin

Debian/otrs2: high 8.8

In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain admin

Action: Upgrade otrs2 to 5.0.20-1 or later.

Affected

introducedfixedlast affected
05.0.20-1-

Fixed versions

5.0.20-1

Sources

published · modified · JSON