CVE-2022-1004

Accounted time is shown in the Ticket Detail View (External Interface), even if ExternalFrontend::TicketDetailView###AccountedTimeDisplay is disabled.

Score

CVSS 3.1 4.3 Medium

Status

Modified - security@otrs.com

Published

2022-03-21

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Otrs (Otrs)
• Otrs (Otrs Ag)

References

• https://otrs.com/release-notes/otrs-security-advisory-2022-06/