In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Otrs |
Otrs |
3.3.0 |
3.3.18 |
References