otrs2: CVE-2021-21252 embedded copy of jquery.validate.js vulnerable to ReDoS

Debian Bug report logs - #980891
otrs2: CVE-2021-21252 embedded copy of jquery.validate.js vulnerable to ReDoS

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: David Prévot <taffit@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: otrs2: CVE-2021-21252 embedded copy of jquery.validate.js vulnerable to ReDoS

Date: Sat, 23 Jan 2021 18:08:16 -0400

[Message part 1 (text/plain, inline)]

Package: otrs2
Severity: important
Tags: security
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>

Hi,

otrs2 embeds a copy of jquery.validate.js that is vulnerable to
CVE-2021-21252 (has been fixed in version 1.19.3.

Regards

David

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.