NA

CVE-2023-38058

Published: 24/07/2023 Updated: 01/08/2023
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

An improper privilege check in the OTRS ticket move action in the agent interface allows any as agent authenticated malicious user to to perform a move of an ticket without the needed permission. This issue affects OTRS: from 8.0.X prior to 8.0.35.

Vulnerable Product Search on Vulmon Subscribe to Product

otrs otrs