Home→Descriptions→SA50454
| Secunia ID | |
| CVE-ID | |
| Release Date |
31 Aug 2012 |
| Criticality | |
| Solution Status |
Vendor Patch |
| Where | |
| Impact |
Cross-Site ScriptingCross-Site Scripting vulnerabilities allow a third party to manipulate the content or behaviour of a web application in a user's browser, without compromising the underlying system. Different Cross-Site Scripting related vulnerabilities are also classified under this category, including "script insertion" and "cross-site request forgery". Cross-Site Scripting vulnerabilities are often used against specific users of a website to steal their credentials or to conduct spoofing attacks. |
| Description |
Debian has issued an update for otrs2. This fixes a vulnerability, which can be exploited by malicious people to conduct script insertion attacks. For more information: |
| Solution |
Apply updated packages via the apt-get package manager. |
| Original Advisory |
DSA-2536-1: |