EUVD-2026-52981

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The...

CVE-2026-18818

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The...

CVE-2026-18818: Authorization Bypass Through User-Controlled Key

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The...

PT-2026-67888

Name of the Vulnerable Software and Affected Versions Ehco1996 django-sspanel versions prior to 2023.12.26 Description A weakness in the Support Ticket Handler component allows for a remote authorization bypass. This issue occurs within the TicketDetailView function located in the...

OTRS Information Disclosure Vulnerability (CNVD-2022-29577)

OTRS is an application from the German company OTRS. A service management software. OTRS suffers from an information disclosure vulnerability that originates from the Billing Time ExternalFrontend:: TicketDetailView AccountedTimeDisplay setting is displayed in the Work Order Details view whether ...

PT-2022-13585

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns the display of accounted time in the Ticket Detail View, which is part of an external interface. Even when the ExternalFrontend::TicketDetailView setting for...

CVE-2022-1004: Exposure of Sensitive Information to an Unauthorized Actor

Accounted time is shown in the Ticket Detail View External Interface, even if ExternalFrontend::TicketDetailViewAccountedTimeDisplay is disabled...