Detections
Analytics
CVE-2022-32741
medium
Description
Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based on the response time.
References
https://otrs.com/release-notes/otrs-security-advisory-2022-09/