Skip to content
CVE PROGRAM SOURCE RECORD2.4 Low

CVE-2022-0474

Disclosure of mail addresses

Description

Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRSCustomContactFields

  • 8.0.x to ≤ 8.0.11affected

References