tocsin

Debian/otrs2: high 7.5

There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially

Action: Upgrade otrs2 to 6.0.32-5 or later.

Affected

introducedfixedlast affected
06.0.32-5-

Fixed versions

6.0.32-5

Sources

published · modified · JSON