CVE-2022-32741

CVE-2022-32741 describes an information disclosure vulnerability in OTRS where an attacker can determine the validity of a username through timing differences in the "Request New Password" feature. This medium-severity vulnerability (CVSS 5.3) is easily exploitable over the network with no user interaction, potentially leading to the enumeration of valid user accounts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.