Security Advisories Dear reader, The following security fix/es was/were made: OTRS Security Advisory 2022-01 ID: OSA-2022-01 Date: 2022-02-07 Title: Dynamic field error message is vulnerable to XSS Severity: 3.8 LOW Product: OTRS 7.0.x Fixed in: OTRS 7.0.32 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N References: CVE-2022-0473 OTRS Security Advisory 2022-02 ID: OSA-2022-02 Date: 2022-02-07 Title: Disclosure of mail addresses Severity: 2.4 LOW Product: OTRSCustomContactFields 8.0.x, Fixed in: OTRS 8.0.12 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N References: CVE-2022-0474 OTRS Security Advisory 2022-04 ID: OSA-2022-04 Date: 2022-02-07 Title: Several vulnerabilities in third-party npm modules Severity: 5.8 MEDIUM Product: OTRS 8.0.x Fixed in: OTRS 8.0.19 FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L References: CVE-2021-3803 / CVE-2021-3807 / CVE-2021-23368 To read the entire Security Advisory/Advisories, please follow this link: https://otrs.com/overview-release-notes-security-advisories/security-advisories/ <https://pg183.keap-link006.com/v2/click/9ba564105ae524cfc2cb96e215ed39e7/eJyNkM2OgkAQhN-lz7BAUFRuxhhCcD0YPZsJdHY7CzOTngZDDO--4088ucleq6q_SvUVBLXSUjaQg_1KlikEwFiTJdSyMVpUfTdXaTZbxAG0pH8KNr2F_Pru9uXf1GWcrLIAZLToI8fDelOV--K8K_eVj1rFvuM_nGSWZvP4Bdp-rssdTNOfZOxItoOHO8iFe7xNasjPkhO3Pv8tYl0eRUbYfdSmi8yAPBBeQsYWlcNQG0EXOqx7JhlD1QzkDBO66J3mK5W1qJvnwyocH8XTL5gjdak=> Kind regards, Your OTRS release team <https://pg183.keap-link005.com/v2/click/d29680c557c9449f77ca00b48c6e64df/eJyNj8EKgkAURf_lrSUVzdSdiIhoLqLWMYxDDenMMD4DEf-9McNVQdt37z2PMwEyQQQWDcSgbm7ogQWaUa44E5hKgYS-w8gL_INjQcvFI9dyUBBP37ZbvlxDx418C3BUzFTOpyQtizq_VkVdmqoi2vz4h-P6XrB3NlB2TIoK5vknmXUcs6eB9xCjHtii1HCjhRfdmv4dUfWxbUvU_Y7KzqarqG22RCkmmo95ycaVML8AZ2FfoA==> Subscribe to the OTRS Newsletter. Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language. German <https://pg183.keap-link007.com/v2/click/cd15b081ae180e1336f72b97be25119c/eJyNkE8LgkAQxb_LnK3VNCtvISKL1iHqHKJDLenusjsWEX73tj90Kug2zHvzG967AaGsJPEGEtCHYB6CBwZroQVKSpWkqn6KizCOZr4HrZCn3KheQ3L7dvvRH9u5HywmHtBVo7NsN8u04Ot8X_J14ay6Mu7HP5wgCuOp_wFlqyUvYRh-krETlJ0d3EJCpsdHpEa4WLQzrfMfibRNGFNk7LhWHWuQSbzYFonQjAwehHUDc6hKa5TNu4gCry_gcAc7u2WJ> English <https://pg183.keap-link016.com/v2/click/5275cdfca9523cec3ba8f7bdbb689877/eJyNkE8LgkAQxb_LnCsTzdRbiIhoHqLOITrUkq7L7liE-N2b_lCXgm7DvPd-w5sBCGUpKa0hBHWwfQcmoLESSqCkqJNUVg8xcDx3OZ9AI-Qp0V2vIBy-Zd_6fevP7YAzdFXIlu1mFWVpkezztMjYqkrNN_7h2K7jLT6geL1KcxjHn2RsBcVnhhsISfd4r1QLrkU73bD_SKRMaFkdaTOrutaSeDENEqGeajwIw4PFnFIplPXrCxlen7TxBhIqZI8=> Spanish <https://pg183.keap-link012.com/v2/click/cf458ed99bf27c1faee160e87f7936b0/eJyNkEELgkAQhf_LnK1VNDNvISKieYg6h-hQS7ouu2Mh4n9vrehU0G2Y9-Yb3huBUJSC0hpCkGcncMEChRWXHAVFnaCyeoob1_fWtgUNF9dEdb2EcPx2-9HnbWA7QWABDRKN5bDfRllaJKc8LTJjlaUyP_7hOJ7rr-wPKN5t0xym6ScZW07xzcA1hKR6nCPV3MSio2qM_0IkdchYR0ovq65lqJnAu26QCNVC4ZlrMzCDKqVEUb-LyHB4AacHQrllnQ==> Portuguese <https://pg183.keap-link020.com/v2/click/3c27bc4e082e1cb1c21de1dbcf389e7b/eJyNkE8LgkAQxb_LnK1VLDNvIiFidYg6h-hgS7oOu1Mh4ndv-0Ongm7DvDe_4b0BGFWhOKsgAqq90AcHNJaSJCpOOsVF-RSXfjBbuA40Up1T3V0IouHb7Ud_bEPXCwMHuCe0lv0uTvJsmx7X2Ta3Viq0_fEPx5v5wdz9gFabOFvDOP4kYyt5dbVwAxHrCz4iVdLG4oNurP_ETCYSomNtpmXXCmKh8GYaZEY90VhLYwdhUQURqupdRI79CzjeAUNYZac=> <https://www.facebook.com/OTRSGroup/> <https://twitter.com/otrsgroup> <https://www.linkedin.com/company/154779> <https://www.youtube.com/channel/UCHdOAyuwwkkk5ko_vy0X8_g> <https://www.instagram.com/otrs_group/> Visit www.otrs.com <https://pg183.keap-link012.com/v2/click/ff5a4786e4968c1fed29812bb49e5b92/eJyNkE0LgkAQhv_LnEXdNDUhQkRENA9RZxFdaknXZR0TEf972wedCrrO-8wzvDMDUl5yTGrwQZyJZ4EGklZMMMox7DiW1TPcWI7tmho0jF9j2Q0C_Pnb7id_TD2TeLYGOAmqkOMhCNMkj4ssyVOFilKqG_94iG05a_MjivZBksGy_DTTlmF0U_IefJQDfVSqmaqFJ9ko_oIoet8wxnHUO5S9XnWtsRuwLVi9JSuXKEcpBOX1-wMpnV6m5Q5eoGHg> or contact us. <https://pg183.keap-link004.com/v2/click/a90deb31234b66c45752ba400c53672c/eJyNj8EKgkAURf_lraXRNDN3IiKD5iJqHaJDDenMMD4DEf-9McNVQdt37z2PMwIyUQqkNYSgbk7gggWaVVxxJjCWAsvqHR5c39vbFjRcPFItewXh-G275vM1sJ1gawEOipnK-RTFGS3Sa06LzFRVqc2PfziO5_o7ewUlx4jmME0_yazlmDwNvIMQdc9mpZobLbzoxvTviKoLCZGou00lW1ItosRsS6WYqD_mGRsWwvQCZQtfnQ==>
smime.p7s
Description: S/MIME cryptographic signature
-- _______________________________________________ announce mailing list -- [email protected] To unsubscribe send an email to [email protected] To manage your subscription or browse the message archive visit: https://lists.otrs.org/postorius/lists/announce.lists.otrs.org/
