cbcvebase.
CVE-2010-4760
published 2011-03-18

CVE-2010-4760: Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which…

PriorityP411low3.5CVSS 2.0
AVNACMAuSCPINAN
EPSS
1.17%
63.5th percentile
Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket.

Affected

67 ranges· showing 25
VendorProductVersion rangeFixed in
debianotrs2< otrs2 3.0.8+dfsg1-1 (bullseye)otrs2 3.0.8+dfsg1-1 (bullseye)
otrsotrs<= 3.0.0
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs
otrsotrs

CVSS provenance

nvdv2.03.5LOWAV:N/AC:M/Au:S/C:P/I:N/A:N
osv3.5LOW
vendor_debian3.5LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.