Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4h57-3gmx-g682

Опубликовано: 15 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

Improper filtering of fields when using the export function in the ticket overview of the external interface could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x

Improper filtering of fields when using the export function in the ticket overview of the external interface could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x

EPSS

Процентиль: 63%
0.00445
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-790

Связанные уязвимости

CVSS3: 5.7
ubuntu
больше 1 года назад

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x

CVSS3: 5.7
nvd
больше 1 года назад

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x

EPSS

Процентиль: 63%
0.00445
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-790