Skip to content
OpenAdvisories
Low · 2.4 CVE-2022-0474 EUVD-2022-15612GHSA-vcxp-cq7g-77m2

Disclosure of mail addresses

Published Feb 7, 2022 · Updated Sep 16, 2024 · Assigned by OTRS

Description

Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions.

Affected products

VendorProductAffectedFixed
OTRS OTRSCustomContactFields 8.0.x – ≤ 8.0.11 —

References