CVE-2024-22316

creationtimestamp| type| source ---|---|--- 2025-01-27 16:14:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113901204918639470 2025-01-27 16:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmic72f2b 2025-01-27 17:40:20+00:00| seen|...

CVE-2025-24626

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqacdxdbo27...

CVE-2025-23457

creationtimestamp| type| source ---|---|--- 2025-01-27 14:08:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113900710168427584 2025-01-27 14:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgq4vtuqpr2h 2025-01-27 14:55:08+00:00| seen|...

CVE-2025-23792

creationtimestamp| type| source ---|---|--- 2025-01-27 14:08:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113900710184303242 2025-01-27 14:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgq4vw5m552p 2025-01-27 14:55:14+00:00| seen|...

Advisory ROSA-SA-2025-2588

software: assimp 5.0.1 OS: ROSA-CHROME packageevrstring: assimp-5.0.1.1-4 CVE-ID: CVE-2024-40724 BDU-ID: 2024-06186 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the File Handler component of the 3D model import library Open Asset Import Library Assimp is related to a heap buffer overflow...

CVE-2025-0696

creationtimestamp| type| source ---|---|--- 2025-01-27 11:13:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113900023692284445 2025-01-27 14:19:25+00:00| seen| https://t.me/cvedetector/16449 2025-01-27 14:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgq73k4wgj2...

CVE-2025-0695

creationtimestamp| type| source ---|---|--- 2025-01-27 11:13:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113900023677624332 2025-01-27 14:19:26+00:00| seen| https://t.me/cvedetector/16450 2025-01-27 14:55:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgq73l5zyr2...

GHSA-C33J-W5W4-W9Q4

creationtimestamp| type| source ---|---|--- 2025-01-27 07:07:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3167...

GHSA-FG8C-FXJ5-QP3X

creationtimestamp| type| source ---|---|--- 2025-01-27 07:07:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3163...

CVE-2024-13117

creationtimestamp| type| source ---|---|--- 2025-01-27 06:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3uiqv62i 2025-01-27 06:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjnup72q 2025-01-27 06:51:46+00:00| seen|...

CVE-2024-43446

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...

CVE-2024-12280

creationtimestamp| type| source ---|---|--- 2025-01-27 06:02:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113898798690089537 2025-01-27 06:06:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113898815656486803 2025-01-27 06:15:41+00:00| seen|...

CVE-2024-12773

creationtimestamp| type| source ---|---|--- 2025-01-27 06:02:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113898798754392142 2025-01-27 06:06:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113898815721237909 2025-01-27 06:15:52+00:00| seen|...

CVE-2024-12321

creationtimestamp| type| source ---|---|--- 2025-01-27 06:02:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113898798705820695 2025-01-27 06:06:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113898815672458082 2025-01-27 06:15:46+00:00| seen|...

CVE-2024-43446

CVE-2024-43446 affects OTRS: improper privilege management in the Generic Interface module allows users with read-only privileges to change ticket status. Impacted: OTRS 7.0.x, 8.0.x, 2023.x, 2024.x and ((OTRS)) Community Edition 6.0.x (and products built on it). Root cause: insufficient access c...

CVE-2024-43446 Improper check of permissions in Generic Interface

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...

CVE-2023-46187

creationtimestamp| type| source ---|---|--- 2025-01-27 02:03:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113897857817278961 2025-01-27 02:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgounlu2vs2i 2025-01-27 04:07:38+00:00| seen|...

PT-2025-2648 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 6.0.x through 8.0.x OTRS versions 2023.x through 2024.x Description: An improper privilege management issue in the OTRS Generic Interface module allows users with read-only permissions to change the ticket status. This issue may...

OTRS security vulnerabilities

OTRS is a service management solution from the German company OTRS. A security vulnerability exists in OTRS that stems from a rights management vulnerability in the OTRS Common Interface Module that allows the Ticket status to be changed even if the user only has ro privileges...

CVE-2024-43446: Improper Privilege Management

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...