Inedo Otter vulnerabilities

• inedo otter Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which... CVE-2017-17086 9.8 CriticalDecember 1, 2017
• inedo otter Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving ... CVE-2017-15607 9.8 CriticalDecember 1, 2017