Unscored DSA-2867-1 2 CVEs

otrs2 - several

Published Feb 23, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 6.0	otrs2	2.4.9+dfsg1-3+squeeze5
Debian · 7	otrs2	3.1.7+dfsg1-8+deb7u4

Vulnerabilities 2

Unscored —

CVE-2014-1471

SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request Syste…

otrs2 Debian

Feb 4, 2014
Unscored —

CVE-2014-1694

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm,…

otrs2 Debian

Feb 4, 2014