CVE-2010-4766

published 2011-03-18

CVE-2010-4766: The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows…

Priority P4 14 medium 4.3 CVSS 2.0

AV N AC M Au N C P I N A N

The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a standard e-mail client.

Affected

61 ranges · showing 25

Vendor	Product	Version range	Fixed in
debian	otrs2	< otrs2 2.4.7+dfsg1-1 (bullseye)	otrs2 2.4.7+dfsg1-1 (bullseye)
otrs	otrs	<= 2.4.6	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—
otrs	otrs	—	—

CVSS provenance

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:P/I:N/A:N

osv 4.3 MEDIUM

vendor_debian 4.3 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20