((OTRS)) Community Edition Version 6.0.34 Released
((OTRS)) Community Edition version 6.0.34 has been released.
This is a security release which fixes several vulnerabilities that have been discovered in other forks of the original OTRS codebase:
- A vulnerability that in certain system configurations allowed authenticated users to execute system shell commands
- A problem with support bundle generation that could result in inclusion of sensitive files in generated support bundles
- Cross-Site Scripting (XSS) vulnerabilities in the handling of dynamic fields configuration and in package installation
- Privilege escalation vulnerability in the processing of HTML templates
Version 6.0.34 is available for download in the Downloads section as a Shell Installer package, and as compressed source archives.