CVE-2022-32740: Information disclosure in the External Interface
Published Jun 13, 2022
·Updated
A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances.
Affected Software
2 affected components
OTRS OTRS>=7.0.0<7.0.35
OTRS OTRS>=8.0.0<8.0.23
Remediation
Information
Update to OTRS 8.0.23 or OTRS 7.0.35.
Event History
Jun 13, 2022
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this OTRS vulnerability?
The vulnerability ID for this OTRS vulnerability is CVE-2022-32740.
2
What is the severity of CVE-2022-32740?
CVE-2022-32740 has a severity of medium with a score of 5.3.
3
Which software versions are affected by CVE-2022-32740?
CVE-2022-32740 affects versions 7.0.0 to 7.0.35 and versions 8.0.0 to 8.0.23 of OTRS.
4
How can a reply to a forwarded email expose the email content under certain circumstances in OTRS?
A reply to a forwarded email by a third party in OTRS can unintentionally expose the email content to the ticket customer.
5
Where can I find more information about CVE-2022-32740?
More information about CVE-2022-32740 can be found at https://otrs.com/release-notes/otrs-security-advisory-2022-08/