OTRS Security Advisory 2015-03 FAQ 5.0.2 (OTRS 5), FAQ 4.0.3. (OTRS 4), FAQ 2.3.4 (OTRS 3.3)
Goran Pismestrovic <[email protected]>
| Newsgroups | gmane.comp.otrs.announce |
|---|---|
| Message-ID | <[email protected]> |
+++++++++ OTRS Security Advisory 2015-03 FAQ 5.0.2 (OTRS 5), FAQ 4.0.3. (OTRS 4), FAQ 2.3.4 (OTRS 3.3) +++++++++ Releases: FAQ 5.0.2 (OTRS 5), FAQ 4.0.3 (OTRS 4), FAQ 2.3.4 (OTRS 3.3) Release date: 01-December-2015 Status: Patch Level Release SECURITY FIXES: ============== ------------------------------------------------------------------ OTRS Security Advisory 2015-03 <security at otrs.org <mailto:[email protected]>> ------------------------------------------------------------------ ID: OSA-2015-03 Date: 2015-11-24 Title: Vulnerability in OTRS FAQ allows user with valid agent login to inject JavaScript code (XSS) Severity: 3.7 (Low) Fixed in: FAQ 5.0.2 (OTRS 5), FAQ 4.0.3 (OTRS 4), FAQ 2.3.4 (OTRS 3.3) URL: https://www.otrs.com/security-advisory-2015-03-vulnerability-discovered-in-otrs-faq-package/ <https://www.otrs.com/security-advisory-2015-03-vulnerability-discovered-in-otrs-faq-package/> References: CVE-2015-8372 To read the entire Security Advisory please follow this link. https://www.otrs.com/security-advisory-2015-03-vulnerability-discovered-in-otrs-faq-package/ <https://www.otrs.com/security-advisory-2015-03-vulnerability-discovered-in-otrs-faq-package/> Best regards Goran Pismestrovic — Marketing Assistant OTRS AG Norsk-Data-Straße 1 61352 Bad Homburg Deutschland T: +49 (0) 6172 681988 0 F: +49 (0) 9421 56818 18 I: http://www.otrs.com/ <http://www.otrs.com/> Business location: Bad Homburg, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: André Mindermann (CEO), Christopher Kuhn, Sabine Riedel Mobile communication and transparent processes - With the OTRS Business Solution™ 5 Managed you can start fast and without your own IT resources - Discover the new features and order here <https://www.otrs.com/new-in-otrs-business-solution-5-mobile-communication-transparent-processes/?utm_id=144> --------------------------------------------------------------------- OTRS mailing list: announce - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/announce To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/announce
signature.asc
(application/pgp-signature, 842 B)
-----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJWXZK+AAoJEMs2JZHcNjyH/zQP/0ePkvphl7Cwhi2lZ/2p6Oqq 6XwQCrTSp78Evvrbki2H070SOtMeihWMHV4cVuJ0GUjNvvkqZcKMx43ch4GbY6kC RZZADHsd62KD9mGhViltQCPImlcgxiKCe5q6qj6xgGHFpu7ackEKoW+14yKeUliw jdBvBff8lFaZqtvG/hbw5eoC7qAgV5GfpSuo0r0G3rQRllLawPrcdMz+45bLQB51 AOnbvuB4S+B627zvFZt1FbTC0mGKlhnL4pNxWqbz8cYZV3VjeS9D9mrlQGR1ic71 cDEo+PsEZOoUmCOxNJdhc/eMXv5E1x4mINNeUk9RyXyYE6UsFcDWte5upIe68uGU VAXuUsFa3/CON0+t2XDy0EJ6Sp3qPFoXPMgBxyiwF0inEuXSmeUYTlUDLb200b6E s/cAkaNVAXgIOI8OrGuy9M1Mn9CBONm41z6A1+8mD7KqUg2N7EInDFTpRlRFnBju nPY6cZOhXnFW+ccrkD5JZbdU4kqjU95if16seu1CxDs5MlA0vvzevVYy/ywbLTRN OgM04h0WwkSZMkLAxLKZnRN89UET/jbMVfsJXoH68HxFfHC2oy05t9Il4dxkJBaP y9KP+Uo5iUfjAfCKv/VtKRNne5VA4MIGr97qtJbqjEpb1VYl3bcQgCa81v4sy5uv GuzDfKv9cJHh3qmqZQ0M =rw42 -----END PGP SIGNATURE-----