Low severity2.4NVD Advisory· Published Feb 7, 2022· Updated Jun 17, 2026
CVE-2022-0474
CVE-2022-0474
Description
Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:otrs:custom_contact_fields:*:*:*:*:*:*:*:*Range: >=8.0.0,<8.0.12
<=8.0.11+ 1 more
- (no CPE)range: <=8.0.11
- (no CPE)range: 8.0.x
Patches
Vulnerability mechanics
References
1- otrs.com/release-notes/otrs-security-advisory-2022-02/nvdVendor Advisory
News mentions
0No linked articles in our index yet.