CVE-2020-1779 – Dynamic templates reveal sensitive data when OTRS tags are used

https://notcve.org/view.php?id=CVE-2020-1779

08 Feb 2021 — When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior versions. Cuando son usadas plantillas dinámicas (OTRSTicketForms), el administrador puede usar etiquetas OTRS que no están enmascaradas apropiadamente y pueden revelar información confidencial. Este problema afec... • https://otrs.com/release-notes/otrs-security-advisory-2020-17 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •