← Back to CVE List

CVE-2023-38058

Published: 2023-07-24T09:15Z
Last Modified: 2024-11-21T08:12Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An improper privilege check in the OTRS ticket move action in the agent interface allows any as agent authenticated attacker to to perform a move of an ticket without the needed permission. This issue affects OTRS: from 8.0.X before 8.0.35. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt