medium4.3
CVE-2022-1004
Accounted time is shown in the Ticket Detail View (External Interface), even if ExternalFrontend::TicketDetailView###AccountedTimeDisplay is disabled.
Impact
Accounted time is shown in the Ticket Detail View (External Interface), even if ExternalFrontend::TicketDetailView###AccountedTimeDisplay is disabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | from 7.0.0 before 7.0.33 from 8.0.0 before 8.0.20 |