| Package | Affected versions | Patched versions |
|---|---|---|
| otrs | ≥ 8.0.0, < 2024.5.2 | 2024.5.2 |
Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free