3.5 LOW
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): Low (L)
- Integrity (I): None (N)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): Low (L)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
Wrong Permission Handling in Document Search Article Meta Filters
An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them. This issue affects OTRS with STORM modules: * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X
Affected products
- ==2023.x
- ==8.0.x
- =<2026.3.x
- ==2024.x
- ==7.0.x
- ==2025.x
Matching in nixpkgs
pkgs.storm
Distributed realtime computation system
pkgs.icestorm
Documentation and tools for Lattice iCE40 FPGAs
-
nixos-unstable 0-unstable-2025-06-03
- nixpkgs-unstable 0-unstable-2025-06-03
- nixos-unstable-small 0-unstable-2025-06-03
pkgs.stormlib
Open-source project that can work with Blizzard MPQ archives
pkgs.jetbrains.phpstorm
PHP IDE from JetBrains
pkgs.jetbrains.webstorm
Web IDE from JetBrains
pkgs.typstPackages.sheetstorm
A template for university exercise sheets
pkgs.python312Packages.distorm3
None
pkgs.python313Packages.distorm3
Disassembler library for x86/AMD64
pkgs.python314Packages.distorm3
Disassembler library for x86/AMD64
pkgs.typstPackages.sheetstorm_0_1_0
A template for university exercise sheets
pkgs.typstPackages.sheetstorm_0_2_0
A template for university exercise sheets
pkgs.typstPackages.sheetstorm_0_3_3
A template for university exercise sheets
pkgs.typstPackages.sheetstorm_0_4_0
A template for university exercise sheets
pkgs.typstPackages.sheetstorm_0_5_0
A template for university exercise sheets
pkgs.typstPackages.sheetstorm_0_5_1
A template for university exercise sheets
Package maintainers
-
@thoughtpolice Austin Seipp <aseipp@pobox.com>
-
@VShell Shell Turner <cam.turn@gmail.com>
-
@leona-ya Leona Maroni <nix@leona.is>
-
@tymscar Oscar Molnar <oscar@tymscar.com>
-
@jamesward James Ward <james@jamesward.com>
-
@theCapypara Marco Köpcke <hello@capypara.de>
-
@baldo Andreas Baldeau <andreas@baldeau.net>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@aanderse Aaron Andersen <aaron@fosslib.net>
-
@cherrypiejam Gongqi Huang
-
@RossSmyth Ross Smyth