CVE-2023-6254: Otrs

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send back to the client in the server response- This issue affects OTRS: from 8.0.X through 8.0.37.

Affected products

• Otrs Otrs: from 8.0.1, up to and including 8.0.37

Published 2023-11-27. Last modified 2026-06-17.