CVE-2020-1768: Otrs

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.

Affected products

• Otrs Otrs: from 7.0.0, up to and including 7.0.14

Published 2020-02-07. Last modified 2026-06-17.