Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-1777 EUVD-2020-12603GHSA-vcjf-j3r2-f6pp

Agent names disclosed in chat feature

Published Oct 15, 2020 · Updated Sep 17, 2024 · Assigned by OTRS

Description

Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions.

Affected products

VendorProductAffectedFixed
OTRS OTRS 7.0.x – ≤ 7.0.21, 8.0.x – ≤ 8.0.6 —

References