CVE-2020-1777

—

CVSS 3.1

5.3 medium

EPSS

<1%p56

Published

Oct 15, 2020 (Oct 15, 2020)

Modified

Jun 17, 2026

Description

Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions.

Vendors: otrs
Products: otrs
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.