{"id":"CLEANSTART-2024-TJ47241","summary":"It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords","details":"Security vulnerability affects the otrs package. It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords.","modified":"2026-10-31T16:02:43.409465169Z","published":"2026-10-31T14:36:10.574118Z","upstream":["CVE-2020-1772"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-TJ47241.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2020-1772"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1772"}],"affected":[{"package":{"name":"otrs","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/otrs?arch=noarch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.33-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-TJ47241.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}