CLEANSTART-2024-TJ47241

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-TJ47241.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2024-TJ47241

Upstream

CVE-2020-1772

Published

2026-10-31T14:36:10Z

Modified

2026-10-31T16:02:43Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords

Details

Security vulnerability affects the otrs package. It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords.

References

Affected packages

CleanStart / otrs

Package

Name: otrs
Purl: pkg:apk/cleanstart/otrs?arch=noarch

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.0.33-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-TJ47241.json"