low3.5
CVE-2019-9753
An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5.
Impact
An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ Articles, Service Catalogue Items, ITSM Configuration Items.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | from 7.0.0 before 7.0.5 |