CVE-2024-43446

CVE-2024-43446 affects OTRS: improper privilege management in the Generic Interface module allows users with read-only privileges to change ticket status. Impacted: OTRS 7.0.x, 8.0.x, 2023.x, 2024.x and ((OTRS)) Community Edition 6.0.x (and products built on it). Root cause: insufficient access c...

CVE-2024-43446 Improper check of permissions in Generic Interface

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...

CVE-2023-46187

creationtimestamp| type| source ---|---|--- 2025-01-27 02:03:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113897857817278961 2025-01-27 02:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgounlu2vs2i 2025-01-27 04:07:38+00:00| seen|...

PT-2025-2648 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 6.0.x through 8.0.x OTRS versions 2023.x through 2024.x Description: An improper privilege management issue in the OTRS Generic Interface module allows users with read-only permissions to change the ticket status. This issue may...

OTRS 安全漏洞

OTRS is a service management solution from the German company OTRS. A security vulnerability exists in OTRS that stems from a rights management vulnerability in the OTRS Common Interface Module that allows the Ticket status to be changed even if the user only has ro privileges...

CVE-2024-43446: Improper Privilege Management

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...

CVE-2017-20196

creationtimestamp| type| source ---|---|--- 2025-01-26 18:09:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113895996203352073 2025-01-26 18:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnztayn7h2b 2025-01-26 19:07:25+00:00|...

CVE-2024-54728

creationtimestamp| type| source ---|---|--- 2025-01-26 15:54:39+00:00| confirmed| https://gist.github.com/xu-yanbo202000460009/00dacd7bfede713a0f052a531da4fabd 2025-01-26 17:57:50+00:00| seen| https://vulnerability.circl.lu/comment/21f63dda-f998-4c51-b7ce-6efc09015c56 2025-01-27 22:23:49+00:00|...

CVE-2024-31906

creationtimestamp| type| source ---|---|--- 2025-01-26 14:41:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113895178452627897 2025-01-26 15:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnprgcqlu2t 2025-01-26 17:15:18+00:00| seen|...

GHSA-8V6P-C4W2-R9XW

creationtimestamp| type| source ---|---|--- 2025-01-26 07:06:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3113...

CVE-2022-49043

creationtimestamp| type| source ---|---|--- 2025-01-26 05:27:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113892999610922070 2025-01-26 05:31:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113893015259156248 2025-01-26 06:15:38+00:00| seen|...

PT-2025-02: Access to files or directories to external paties in TCPDF

The vulnerability was identified in TCPDF, version 6.8.0. The discovered vulnerability allows an attacker to transmit a specially created HTML file containing an image in Base64 format. Using the specified payload, the attacker can access an arbitrary image outside of the directory. Vulnerability...

CVE-2024-35148

creationtimestamp| type| source ---|---|--- 2025-01-25 14:31:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113889477632274834 2025-01-25 15:05:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3086 2025-01-25 18:30:38+00:00| seen|...

CVE-2024-35112

creationtimestamp| type| source ---|---|--- 2025-01-25 13:35:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113889257493842708 2025-01-25 14:05:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3082 2025-01-25 17:06:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3107...

CVE-2024-35114

creationtimestamp| type| source ---|---|--- 2025-01-25 13:35:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113889257542244683 2025-01-25 14:05:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3080 2025-01-25 17:06:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3105...

CVE-2024-13450

creationtimestamp| type| source ---|---|--- 2025-01-25 08:29:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113888054113670556 2025-01-25 09:04:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3070 2025-01-25 12:09:15+00:00| seen| https://t.me/cvedetector/16384 2025-02-06...

CVE-2024-13550

creationtimestamp| type| source ---|---|--- 2025-01-25 08:05:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3053 2025-01-25 08:13:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113887990362859810 2025-01-25 10:28:46+00:00| seen| https://t.me/cvedetector/16370...

CVE-2024-13441

creationtimestamp| type| source ---|---|--- 2025-01-25 07:58:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113887931313995607 2025-01-25 08:05:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3055 2025-01-25 10:28:40+00:00| seen|...

CVE-2024-12512

creationtimestamp| type| source ---|---|--- 2025-01-25 07:28:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113887813202332113 2025-01-25 08:05:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3068 2025-01-25 10:29:00+00:00| seen| https://t.me/cvedetector/16380...

CVE-2024-12600

creationtimestamp| type| source ---|---|--- 2025-01-25 06:46:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113887647773020346 2025-01-25 07:05:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3049...