Security Advisories

 

 

 

Dear reader,

The following security fixes were made:

OTRS Security Advisory 2024-05

ID: OSA-2024-05
Date: 2024-06-03
Title: Possible remote code execution in uploaded filenames
Severity (CVSS v3.1): 6.3 MEDIUM
Severity (CVSS v4.0): 6.8 MEDIUM
Urgency: Moderate
Products: OTRS, ((OTRS)) Community Edition
Fixed in: OTRS 7.0.50, OTRS 2024.4.3
CVSS VECTORs: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L / CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber
References: CVE-2024-23793 

To read the entire Security Advisory/Advisories, please follow this link:

https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-security-advisories/security-advisories/

 

Kind regards,

Your OTRS release team

 

 

 

 

Subscribe to the OTRS Newsletter.

 

Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language.

 

 

 

Facebook

Twitter

LinkedIn

YouTube

Instagram