CVE-2008-7283: Otrs

Medium severity, CVSS 6.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-interface updates to tickets by leveraging queue read permissions.

Affected products

• Otrs Otrs: up to and including 2.2.5; version 0.5 only; version 1.0 only; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; …

Published 2011-03-18. Last modified 2026-06-16.