{"action":"Upgrade otrs2 to 6.0.17-1 or later.","affected":[{"fixed":"6.0.17-1","introduced":"0"}],"component":"otrs2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["6.0.17-1"],"id":"tcs_01M5NEDC5P91Z9QQV7R6PPFC9S","modified_at":"2026-08-29T07:02:52.849014287Z","published_at":"2019-03-13T22:29:00.630Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-9751","https://security-tracker.debian.org/tracker/CVE-2019-9751"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-9751","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-9751"}],"summary":"An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of J"}