Description (CNA)
Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OTRS AG / OTRS | affected 8.0.x; affected 2023.x; affected 2024.x through 2024.4.x |
CWE
CWE-790
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.