一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-48189 [MEDIUM] – An improper Input Validation vulnerability in OTRS Customer Backend module allows to acces

未分类
📑 文章目录

An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature has to be anabled and CustomerGroupSupport has to be used to be affected.

This issue affects OTRS:

* 7.0.X
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.4.X