CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.4. See the original NVD description below for full technical details.
CVE
CVE-2022-0474
Severity
LOW
CVSS
2.4
EPSS
0.64%
Original NVD Description
Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)