Bug - Invalid session

[stek6]

Environment

• Server OS: Linux Ubuntu 22.04.4 LTS (Jammy Jellyfish)
• Browser: Edge 125.0.2535.67, Chrome 125.0.6422.77
• Znuny version: LTS 6.5.8

Expected behavior

When the user (agent or Admin) uses the Settings menu (e.g. in Queue View or Status View) he can select, for example, the number of visible rows and/or add/remove visible columns. The Save button makes the changes effective and the form updates by modifying visible columns and/or number of rows shown

Actual behavior

When the user (agent or Admin) uses the Settings menu (e.g. in Queue View or Status View) he can select, for example, the number of visible rows and/or add/remove visible columns. When confirmation is given via the Save button, the user is logged out of OTRS and returns to login. In the Dashboard, however, the Settings button present for the various widgets is blocked and does not open any settings window

How to reproduce

Steps to reproduce the behavior:

1. Access the agent interface
2. Click on Tickets -> Status view
3. Whatever the display mode (S, M, L) the gear icon (Settings) is visible at the top right
4. Open the Settings menu and change whether or not tickets per page or visible columns are visible
5. Click Save
6. The next reload takes you back to login and the user is logged out (Invalid session. Log in again.)

Additional information

For the moment we have detected the anomaly in:

• Tickets -> Queue view
• Tickets -> Status view
• Admin -> Communication Log
• Admin -> Dynamic Field

The same button is also present in the Dashboard but blocked: no menu for editing widgets is opened

We also made a backend change for sessions from DB to FS but it didn't solve the problem.

Errors detected in OTRS logs (debug mode); no errors in the apache logs

[Wed May 29 08:55:57 2024][Notice][Kernel::System::AuthSession::DB::RemoveSessionID] Removed SessionID n4v6aDlnAGsfUzwm6dsuBpreKTVFbM1a. [Wed May 29 08:55:57 2024][Notice][Kernel::System::AuthSession::DB::CheckSessionID] SessionID: 'n4v6aDlnAGsfUzwm6dsuBpreKTVFbM1a' is invalid!!!

[Wed May 29 13:01:19 2024][Notice][Kernel::System::AuthSession::FS::RemoveSessionID] Removed SessionID 80DgoVc7GiSuu4kcfw8FBZuanuZCQTSVtW. [Wed May 29 13:01:20 2024][Notice][Kernel::System::AuthSession::FS::CheckSessionID] SessionID: '80DgoVc7GiSuu4kcfw8FBZuanuZCQTSVtW' is invalid!!!

Screenshots