Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-1004

Information disclosure in the External Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

Accounted time is shown in the Ticket Detail View (External Interface), even if ExternalFrontend::TicketDetailView###AccountedTimeDisplay is disabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRS

  • 7.0.x to ≤ 7.0.32affected
  • 8.0.x to ≤ 8.0.19affected

References