Otrs AG vulnerabilities
81 CVEs and advisories name Otrs AG as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-21439Possible DoS attack using a special crafted URL in email body
- CVE-2021-21438FAQ articles are shown to users without permission
- CVE-2021-21437Config Items are shown to users without permission
- CVE-2021-21436Agent is able to link customer's Config Items without permission
- CVE-2021-21435Information exposure in PDF export
- CVE-2021-21434XSS in Survey Module
- CVE-2020-1779Dynamic templates reveal sensitive data when OTRS tags are used
- CVE-2020-1778Bypassing user account validation
- CVE-2020-1777Agent names disclosed in chat feature
- CVE-2020-1776Invalidating or changing user does not invalidate session
- CVE-2020-1775Information disclosure in external interface
- CVE-2020-1774Information disclosure
- CVE-2020-1773Session / Password / Password token leak
- CVE-2020-1772Information Disclosure
- CVE-2020-1771Possible XSS in Customer user address book
- CVE-2020-1770Information disclosure in support bundle files
- CVE-2020-1769Autocomplete in the form login screens
- CVE-2020-1768External Interface does not invalidate session
- CVE-2020-1767Possible to send drafted messages as wrong agent
- CVE-2020-1766Improper handling of uploaded inline images
- CVE-2020-1765Spoofing of From field in several screens