Improper input validation in Otrs

CVE-2010-4759

Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service (daemon hang) via a fulltext search.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.013 (68.4th percentile) — read the EPSS interpretation.

Affected products

  • Otrs — versions 0.5, 1.0, 1.0.0
  • N/a — versions n/a

Weakness classification (CWE)

References