{"action":"Upgrade otrs2 to 6.0.2-1 or later.","affected":[{"fixed":"6.0.2-1","introduced":"0"}],"component":"otrs2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["6.0.2-1"],"id":"tcs_01M5NC8P3QWPHNYT8FM7TQGKE3","modified_at":"2026-08-04T05:48:22.065460112Z","published_at":"2017-12-08T15:29:00.323Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-16921","https://security-tracker.debian.org/tracker/CVE-2017-16921"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-16921","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-16921"}],"summary":"In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameter"}