Debian: 2536-1: otrs2: cross-site scripting
(Aug 30) It was discovered that otrs2, a ticket request system, contains a cross-site scripting vulnerability when email messages are viewed using Internet Explorer. This update also improves the HTML security filter to detect tag nesting. [More…]