CVE-2022-3501

Article template contents with sensitive data could be accessed from agents without permissions...

CVE-2022-3501 Information exposure of template content due to missing check of permissions

Article template contents with sensitive data could be accessed from agents without permissions...

CVE-2022-3501

CVE-2022-3501 is an information-exposure vulnerability in OTRS where an agent without privileges could access the contents of article templates containing sensitive data. The root cause is reportedly missing permission checks when accessing template contents. Affected products/versions are OTRS p...