tocsin

Debian/otrs2: medium 4.3

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tick

Action: Upgrade otrs2 to 6.0.7-1 or later.

Affected

introducedfixedlast affected
06.0.7-1-

Fixed versions

6.0.7-1

Sources

published · modified · JSON