
[https://pg183.files.keap.app/pg183/d45d7bd8-d69a-4057-b710-7f1e3cf0f641] Security Advisories Dear reader, The following security fixes were made: OTRS Security Advisory 2024-10 ID: OSA-2024-10 Date: 2024-08-26 Title: Stored XSS in System Configuration Severity CVSS v3.1: 4.9 MEDIUM Severity CVSS v4.0: 4.8 MEDIUM Urgency: Moderate Product: OTRS, ((OTRS)) Community Edition Fixed in: OTRS 2024.6.1 and OTRS 7.0.51 CVSS VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/R:U/RE:M/U:Amber References: CVE-2024-43442 OTRS Security Advisory 2024-11 ID: OSA-2024-11 Date: 2024-08-26 Title: Stored XSS in process management Severity CVSS v3.1: 4.9 MEDIUM Severity CVSS v4.0: 4.8. MEDIUM Urgency: Moderate Product: OTRS, ((OTRS)) Community Edition Fixed in: OTRS 2024.6.1 and OTRS 7.0.51 CVSS VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/R:U/RE:M/U:Amber References: CVE-2024-43443 OTRS Security Advisory 2024-12 ID: OSA-2024-12 Date: 2024-08-24 Title: Passwords are written to Admin Log Module Severity CVSS v3.1: 8.2 HIGH Severity CVSS v4.0: 8.6 HIGH Urgency: Low Product: OTRS, ((OTRS)) Community Edition Fixed in: OTRS 2024.6.1 and OTRS 7.0.51 CVSS VECTOR: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N * CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/R:A/V:D/RE:L/U:Amber References: CVE-2024-43444 To read the entire Security Advisory/Advisories, please follow this link: https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-securit...https://pg183.keap-link008.com/v2/click/a64ac748c0a5ec7ce8ce6a09b4e26f63/eJy... Kind regards, Your OTRS release team [https://pg183.files.keap.app/pg183/9d0d1057-3e98-41d2-a8a7-c347d19963ce]https://pg183.keap-link008.com/v2/click/e227864dcf328bfe15ee45c86bfd4444/eJy... Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. Germanhttps://pg183.keap-link008.com/v2/click/875f9ed04150030632d1768eb6db3061/eJy... Spanishhttps://pg183.keap-link008.com/v2/click/632e4e860b7b3b2fdcc4772cd1a8c678/eJy... Englishhttps://pg183.keap-link008.com/v2/click/1d3ebd01db01a226050f1c9d6dabd1ac/eJy... Portuguesehttps://pg183.keap-link008.com/v2/click/46b1fb5434512caab825127570b94c8b/eJy... [Facebook]https://pg183.keap-link008.com/v2/click/7df4481c4593aeffd4363a0a874a6bfe/eJy... [Twitter]https://pg183.keap-link008.com/v2/click/9fbd82d4430ec21dc35b5fa8aae7b0a1/eJy... [LinkedIn]https://pg183.keap-link008.com/v2/click/fc547c52871d80193462312048c2d9c1/eJy... [YouTube]https://pg183.keap-link008.com/v2/click/a3da6aa67d0fff47e4940bdebf294ba6/eJy... [Instagram]https://pg183.keap-link008.com/v2/click/4051e59734623afd82852b837d167f74/eJy... Visit www.otrs.comhttps://pg183.keap-link008.com/v2/click/d0a33ab7694dca6ddee2927b7d50385a/eJy... or contact us.https://pg183.keap-link008.com/v2/click/e7058b5a6724761e9984d684e1c2ad3f/eJy... Legal noticehttps://pg183.keap-link008.com/v2/click/4ce309f8cd2363623510cadac46a7271/eJy... Privacy Statementhttps://pg183.keap-link008.com/v2/click/e4e774d2f7e645d16725f6310f091a57/eJy... announce mailing list -- announce@lists.otrs.org To unsubscribe send an email to announce-leave@lists.otrs.orgmailto:announce-leave@lists.otrs.org To manage your subscription or browse the message archive visit: https://lists.otrs.org/postorius/lists/announce.lists.otrs.org/https://pg183.keap-link008.com/v2/click/51c24aa79789f7e16062c63c80900f8b/eJy...