CVE-2024-23791

—

CVSS 3.1

7.5 high

EPSS

<1%p42

Published

Jan 29, 2024 (Jan 29, 2024)

Modified

Jun 17, 2026

Description

Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1.

Vendors: otrs
Products: otrs
Weakness: CWE-532
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.