ALT Linux Team

Package otrs update in sisyphus on 2014-09-04

ALT-PU-2014-2073-1

Package otrs updated to version 3.3.8-alt1 for branch sisyphus in task 129029.

Closed vulnerabilities

Published: 2014-04-02
Modified: 2024-11-21

CVE-2014-2553

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to dynamic fields.

Severity: LOW (3.5)
References:
Published: 2014-04-23
Modified: 2024-11-21

CVE-2014-2554

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element.

Severity: MEDIUM (4.3)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top