CVE-2021-21435 Information exposure in PDF export

2021-02-0800:00:00

CWE-200

OTRS

raw.githubusercontent.com

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

JSON

Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions.