| Package | Affected versions | Patched versions |
|---|---|---|
| otrs | ≥ 6.0.1≥ 7.0.0, < 7.0.29 | 7.0.29 |
Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free