CVE-2025-24390

Summary

CVE-2025-24390 is a recently disclosed vulnerability affecting the OTRS Application Server. Affected versions include OTRS 7.0.X, OTRS 8.0.X, OTRS 2023.X, and OTRS 2024.X. This issue arises due to missing attributes for sensitive cookie settings during HTTPS sessions, which in turn enables session hijacking. An attacker can exploit this vulnerability to gain unauthorized access to user accounts, potentially leading to confidential data exposure. It is crucial for organizations utilizing OTRS to apply the necessary patches promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.