CVE-2025-24389
EUVD-2025-368527.01.2025, 06:15
Certain errors of the upstream libraries will insert sensitive information in the OTRS or ((OTRS)) Community Edition log mechanism and mails send to the system administrator. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affectedEnginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| otrs | otrs | 7.0.0 ≤ 𝑥 < 7.1.0 | CNA |
| otrs | otrs | 8.0.0 ≤ 𝑥 < 8.1.0 | CNA |
| otrs | otrs | 2023.0 ≤ 𝑥 < 2024.0 | CNA |
| otrs | otrs | 2024.0 ≤ 𝑥 < 2025.0 | CNA |
| otrs | otrs | 6.0.0 ≤ 𝑥 ≤ 6.0.34 | CNA |
Common Weakness Enumeration