cve/2024/CVE-2024-23791.md

### [CVE-2024-23791](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23791)
![](https://img.shields.io/static/v1?label=Product&message=OTRS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2023.x%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=7.0.x%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=8.0.x%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-532%20Insertion%20of%20Sensitive%20Information%20into%20Log%20File&color=brightgreen)

### Description

Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1.

### POC

#### Reference
- https://otrs.com/release-notes/otrs-security-advisory-2024-02/

#### Github
No PoCs found on GitHub currently.