medium4.3
CVE-2014-2554
OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element.
Impact
OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensuse | Opensuse | Versions 12.3, 13.1 |
| Otrs | Otrs | Versions 3.1.0, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5 |