# Disclosure Timeline

- **July 2025** – Vulnerability discovered
- **September 22, 2025** – Vendor confirmed the issue and requested a wording adjustment to the public summary
- **March 2026** – Vendor confirmed that the fix would be released in:
  - **Znuny LTS 6.5.19**
  - **Znuny 7.3.1**
- **March 25, 2026** – Public release of the vendor fix

## Vendor Communication Note

The vendor clarified that `OTRSCustomerInterface` should not be treated as a fixed literal parameter name in the summary, but rather as the value defined by the `CustomerPanelSessionName` system configuration.
