A vulnerability, which was classified as critical, was found in OTRS up to 8.0.x/2023.x/2024.4.x. Affected is the function AgentFrontend::Ticket::InlineEditing::Property of the component Ticket Handler. The manipulation leads to incorrect privilege assignment.

This vulnerability is traded as CVE-2024-23794. It is possible to launch the attack remotely. There is no exploit available.