https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:33:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4078 EUVD-2026-4078 https://cve.radiocsirt.org/vuln/euvd-2026-4078 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23794 <p>An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the setting &#39;RequiredLock&#39; of &#39;AgentFrontend::Ticket::InlineEditing::Property###Watch&#39; in the system configuration.This issue affects OTRS:</p> <p>* 8.0.X * 2023.X * from 2024.X through 2024.4.x</p> <p>An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the setting &#39;RequiredLock&#39; of &#39;AgentFrontend::Ticket::InlineEditing::Property###Watch&#39; in the system configuration.This issue affects OTRS:</p> <p>* 8.0.X * 2023.X * from 2024.X through 2024.4.x</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23794 https://cve.radiocsirt.org/vuln/ghsa-295x-34p8-7q26 <p>An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the setting &#39;RequiredLock&#39; of &#39;AgentFrontend::Ticket::InlineEditing::Property###Watch&#39; in the system configuration.This issue affects OTRS:</p> <p>* 8.0.X * 2023.X * from 2024.X through 2024.4.x</p> <p>An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the setting &#39;RequiredLock&#39; of &#39;AgentFrontend::Ticket::InlineEditing::Property###Watch&#39; in the system configuration.This issue affects OTRS:</p> <p>* 8.0.X * 2023.X * from 2024.X through 2024.4.x</p> https://cve.radiocsirt.org/vuln/ghsa-295x-34p8-7q26 https://cve.radiocsirt.org/vuln/gsd-2024-23794 gsd-2024-23794 https://cve.radiocsirt.org/vuln/gsd-2024-23794 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1611 <p>Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um Sicherheitsmechanismen zu umgehen und um vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um Sicherheitsmechanismen zu umgehen und um vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1611