Lucene search

K
mageiaGentoo FoundationMGASA-2014-0194
HistoryApr 24, 2014 - 11:11 p.m.

Updated otrs packages fix multiple vulnerabilities

2014-04-2423:11:34
Gentoo Foundation
advisories.mageia.org
14

0.002 Low

EPSS

Percentile

52.9%

Updated otrs package fixes security vulnerabilities: A logged in attacker could insert special content in dynamic fields, leading to JavaScript code being executed in OTRS (CVE-2014-2553). An attacker could embed OTRS in a hidden iframe tag of another page, tricking the user into clicking links in OTRS (CVE-2014-2554).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchotrs< 3.2.16-1otrs-3.2.16-1.mga3
Mageia4noarchotrs< 3.2.16-1otrs-3.2.16-1.mga4