Skip to content
OpenAdvisories
Low · 3.5 CVE-2022-3501 EUVD-2022-42872GHSA-v7r4-jv98-9mhx

Information exposure of template content due to missing check of permissions

Published Oct 17, 2022 · Updated May 10, 2025 · Assigned by OTRS

Description

Article template contents with sensitive data could be accessed from agents without permissions.

Affected products

VendorProductAffectedFixed
Accessing template content without permissions OTRS 8.0.x – ≤ 8.0.25 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 znuny No fix yet —
Ubuntu 26.04 LTS znuny No fix yet —
Ubuntu 25.10 znuny No fix yet —
Ubuntu 24.04 LTS znuny No fix yet —

References