Parameter Injection Vulnerability in OTRS Admin and Agent Interface

CVE-2025-24388

What is CVE-2025-24388?

A significant vulnerability exists in the OTRS Admin Interface and Agent Interface, allowing parameter injection by authenticated users. This flaw can be exploited by an admin or agent user, posing potential risks to sensitive data and application integrity. Users of affected OTRS versions (prior to OTRS 8) should be vigilant and apply necessary updates to safeguard their systems. Products built on the Community Edition of OTRS may also be vulnerable.

References