| Package | Affected versions | Patched versions |
|---|---|---|
| otrs | ≥ 7.0.0, < 7.0.35≥ 8.0.0, < 8.0.23 | 7.0.358.0.23 |
Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based on the response time.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free