Matthias Terlinde

**Name of the Vulnerable Software and Affected Versions** OTRS versions 7.0.X through 2026.3.X **Description** An issue in the SQL Box within the admin interface leads to uncontrolled resource consumption, resulting in a Denial of Service (DoS) against the webserver, which causes the system to kill the process. **Recommendations** Update OTRS to version 2026.3.X or newer.

**Name of the Vulnerable Software and Affected Versions** OTRS versions 7.0.X through 7.0.46 OTRS versions 8.0.X through 8.0.36 OTRS Community Edition versions 6.0.X through 6.0.34 **Description** The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the `SSL get verify result()` function is not used, the certificate is trusted always, and it cannot be ensured that the certificate satisfies all necessary security requirements. This could allow an attacker to use an invalid certificate to claim to be a trusted host, use expired certificates, or conduct other attacks that could be detected if the certificate is properly validated. **Recommendations** For OTRS versions 7.0.X through 7.0.46, update to version 7.0.47 or later. For OTRS versions 8.0.X through 8.0.36, update to version 8.0.37 or later. For OTRS Community Edition versions 6.0.X through 6.0.34, update to a version later than 6.0.34. As a temporary workaround, consider disabling the use of SSL/TLS for email communication until a patch is available. Restrict access to the email functionality to minimize the risk of exploitation. Avoid using the `SSL get verify result()` function until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: OTRS AG (OTRS) Community Edition versions 6.0.1 and later OTRS AG OTRS versions 7.0.28 and prior OTRS AG OTRS versions 8.0.15 and prior Description: The issue is related to Generated Support Bundles containing private S/MIME and PGP keys if the containing folder is not hidden. Recommendations: For OTRS AG (OTRS) Community Edition versions 6.0.1 and later, consider hiding the containing folder to prevent exposure of private keys. For OTRS AG OTRS versions 7.0.28 and prior, consider hiding the containing folder to prevent exposure of private keys. For OTRS AG OTRS versions 8.0.15 and prior, consider hiding the containing folder to prevent exposure of private keys. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OTRS Community Edition versions prior to 5.0.42 OTRS Community Edition versions prior to 6.0.27 OTRS versions prior to 7.0.16 **Description** The issue arises when a user downloads PGP or S/MIME keys/certificates, and the exported file has the same name for both private and public keys. This can lead to mixing them up and potentially sending the private key to a third party instead of the public key. **Recommendations** For OTRS Community Edition versions prior to 5.0.42, update to a version later than 5.0.42 to resolve the issue. For OTRS Community Edition versions prior to 6.0.27, update to a version later than 6.0.27 to resolve the issue. For OTRS versions prior to 7.0.16, update to a version later than 7.0.16 to resolve the issue. As a temporary workaround, consider renaming the private and public key files to distinct names after export to avoid confusion.

**Name of the Vulnerable Software and Affected Versions** OTRS Community Edition versions 5.0.41 and prior OTRS Community Edition versions 6.0.26 and prior OTRS versions 7.0.15 and prior **Description** The issue is related to support bundle generated files that could contain sensitive information, potentially leading to unwanted disclosure. **Recommendations** For OTRS Community Edition versions 5.0.41 and prior, update to a version later than 5.0.41. For OTRS Community Edition versions 6.0.26 and prior, update to a version later than 6.0.26. For OTRS versions 7.0.15 and prior, update to a version later than 7.0.15.

**Name of the Vulnerable Software and Affected Versions** Open Ticket Request System (OTRS) versions 7.0.x through 7.0.7 Open Ticket Request System (OTRS) Community Edition versions 6.0.x through 6.0.19 Open Ticket Request System (OTRS) Community Edition versions 5.0.x through 5.0.36 **Description** An issue was discovered in Open Ticket Request System (OTRS) where an attacker could send a malicious email to an OTRS system. If a logged-in agent user quotes it, the email could cause the browser to load external image resources. **Recommendations** For Open Ticket Request System (OTRS) versions 7.0.x through 7.0.7, update to a version outside of this range to mitigate the risk. For Open Ticket Request System (OTRS) Community Edition versions 6.0.x through 6.0.19, update to a version outside of this range to mitigate the risk. For Open Ticket Request System (OTRS) Community Edition versions 5.0.x through 5.0.36, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting the ability of agent users to quote emails from untrusted sources until a patch is available.