Security Advisories

Dear reader,

The following security fix/es was/were made:

OTRS Security Advisory 2021-20

ID: OSA-2021-20
Date: 2021-10-18
Title: Agents are able to lock the ticket without the "Owner" permission
Severity: 3.5 LOW
Product: OTRS 8.0.x
Fixed in: OTRS 8.0.17
FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References: CVE-2021-36097

OTRS Security Advisory 2021-19

ID: OSA-2021-19
Date: 2021-10-18
Title: Regular Expression Denial of Service in postcs
Severity: 5.3 MEDIUM
Product: OTRS 8.0.x, OTRS 7.0.x
Fixed in: OTRS 8.0.17, OTRS 7.0.30
FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References: CVE-2021-23368

Subscribe to the OTRS Newsletter.

Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language.

OTRS AG

Zimmersmühlenweg 11
61440 Oberursel 
Germany
+49 6172 681988 0