CVE-2014-2554

EPSS 0.23%

Published: 4/23/2014Modified: 4/28/2026

Description

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element.

Affected packages (1)

Debian/otrs2from 0, < 3.3.6-1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-2554