|
Dear reader,
The following security fixes were made:
OTRS Security Advisory 2024-10
ID: OSA-2024-10
Date: 2024-08-26
Title:
Stored XSS in System Configuration
Severity CVSS v3.1: 4.9 MEDIUM
Severity CVSS v4.0: 4.8 MEDIUM
Urgency:
Moderate
Product: OTRS,
((OTRS)) Community Edition
Fixed in:
OTRS 2024.6.1 and OTRS 7.0.51
CVSS VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/R:U/RE:M/U:Amber
References: CVE-2024-43442
OTRS Security Advisory 2024-11
ID: OSA-2024-11
Date: 2024-08-26
Title:
Stored XSS in process management
Severity CVSS v3.1: 4.9 MEDIUM
Severity CVSS v4.0: 4.8. MEDIUM
Urgency: Moderate
Product: OTRS, ((OTRS)) Community Edition
Fixed in: OTRS 2024.6.1 and OTRS 7.0.51
CVSS VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/R:U/RE:M/U:Amber
References: CVE-2024-43443
OTRS Security Advisory 2024-12
ID: OSA-2024-12
Date: 2024-08-24
Title:
Passwords are written to Admin Log Module
Severity CVSS v3.1: 8.2 HIGH
Severity CVSS v4.0: 8.6 HIGH
Urgency: Low
Product: OTRS, ((OTRS)) Community Edition
Fixed in: OTRS 2024.6.1 and OTRS 7.0.51
CVSS VECTOR: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N * CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/R:A/V:D/RE:L/U:Amber
References: CVE-2024-43444
To read the entire Security Advisory/Advisories, please follow this link:
https://otrs.com/otrs-software-solutions/otrs/overview-release-notes-security-advisories/security-advisories/
Kind regards,
Your OTRS release team
|
