Total vulnerabilities in the database
A vulnerability in OTRS Application Server allows session hijacking due to missing attributes for sensitive cookie settings in HTTPS sessions. A request to an OTRS endpoint from a possible malicious web site, would send the authentication cookie, performing an unwanted read operation.
This issue affects:
| Software | From | Fixed in |
|---|---|---|
| otrs / otrs | 7.0.0 | 2025.1.2.x |