CVE-2020-1775: Otrs

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

BCC recipients in mails sent from OTRS are visible in article detail on external interface. This issue affects OTRS: 8.0.3 and prior versions, 7.0.17 and prior versions.

Affected products

• Otrs Otrs: from 7.0.0, before 7.0.18 (fixed in 7.0.18); from 8.0.0, before 8.0.3 (fixed in 8.0.3)

Published 2020-06-08. Last modified 2026-06-17.