tocsin

Debian/otrs2: medium 4.8

An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of J

Action: Upgrade otrs2 to 6.0.17-1 or later.

Affected

introducedfixedlast affected
06.0.17-1-

Fixed versions

6.0.17-1

Sources

published · modified · JSON