ZSA-2019-03
Importing statistics XML can lead to reading arbitrary files of OTRS file system
Problem
An attacker who is logged in as agent can import statistics XML that can lead to reading arbitrary files of the OTRS file system.
Workaround
As a workaround, you can replace the affected files.
Solution
Upgrade to the latest available OTRS patch level (https://ftp.otrs.org/pub/otrs/).