CVE-2023-38058

4.3 mediumEPSS 0.4%

Medium (4.3) in otrs otrs. EPSS 0.4% chance of exploitation in the next 30 days.

An improper privilege check in the OTRS ticket move action in the agent interface allows any as agent authenticated attacker to to perform a move of an ticket without the needed permission. This issue affects OTRS: from 8.0.X before 8.0.35.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs: CWE-863, CWE-269
Published: 2023-07-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

otrs:otrs

References

https://otrs.com/release-notes/otrs-security-advisory-2023-07/
https://otrs.com/release-notes/otrs-security-advisory-2023-07/

Check your stack JSON