openSUSE Security Update : otrs (openSUSE-SU-2010:1061-1)

OTRS version 2.4.9 fixes among other things two cross-site-scripting and a denial of service vulnerability CVE-2010-2080, CVE-2010-3476, CVE-2010-4071. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

CVE-2010-2080

Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3476

Removed by vendor...

CVE-2010-2080

OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 are affected by CVE-2010-2080, a cross-site scripting (XSS) vulnerability in the web interface allowing remote authenticated users to inject script/HTML via unspecified vectors. The issue is documented across multiple sources (NVD and OSV/OpenVAS ent...