CVE-2014-2554
Fixed in a distro release EPSS 1%
OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | otrs2 | 3.3.6-1 |
| Debian 7 | otrs2 | 3.3.18-1~deb7u1 |
| openSUSE Tumbleweed | otrs | 3.3.14-37.1 |