Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2021-21435

Information exposure in PDF export

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRS

  • 7.0.x to ≤ 7.0.23affected
  • 8.0.x to ≤ 8.0.10affected

References