{"action":"Upgrade otrs2 to 6.0.23-1 or later.","affected":[{"fixed":"6.0.23-1","introduced":"0"}],"component":"otrs2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["6.0.23-1"],"id":"tcs_01M5NDZB5PRCRGH69Z1FWMD8RK","modified_at":"2026-08-29T07:02:15.487303671Z","published_at":"2020-03-19T18:15:14.477Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-16375","https://security-tracker.debian.org/tracker/CVE-2019-16375"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-16375","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-16375"}],"summary":"An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or cust"}