https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:33:42 +0000 https://cve.radiocsirt.org/vuln/cve-2024-23794 <p><strong>Affected:</strong> OTRS AG OTRS</p> <p>An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the setting &#39;RequiredLock&#39; of &#39;AgentFrontend::Ticket::InlineEditing::Property###Watch&#39; in the system configuration.This issue affects OTRS:</p> <p>* 8.0.X * 2023.X * from 2024.X through 2024.4.x</p> <p><strong>Affected:</strong> OTRS AG OTRS</p> <p>An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the setting &#39;RequiredLock&#39; of &#39;AgentFrontend::Ticket::InlineEditing::Property###Watch&#39; in the system configuration.This issue affects OTRS:</p> <p>* 8.0.X * 2023.X * from 2024.X through 2024.4.x</p> https://cve.radiocsirt.org/vuln/cve-2024-23794