| Package | Affected versions | Patched versions |
|---|---|---|
| otrs | ≥ 7.0.0, ≤ 7.0.8 |
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8. A customer user can use the search results to disclose information from their "company" tickets (with the same CustomerID), even when the CustomerDisableCompanyTicketAccess setting is turned on.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free