What is CVE-2019-18180?

CVE-2019-18180 is a medium-severity vulnerability in Otrs, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 5.3/10. Published 2019-12-05.

How severe is CVE-2019-18180?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Otrs

CVE-2019-18180

Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g. attaching files to mails) of ((OTRS)) Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: ((OTRS)) Community Edition 5.0.x version 5.0.38 and prior versions; 6.0.x version 6.0.23 and prior versions. OTRS AG: OTRS 7.0.x version 7.0.12 and prior versions.

EPSS: 0.019 (77.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Otrs
N/a — versions n/a

Weakness classification (CWE)

CWE-835 — Loop with Unreachable Exit Condition (Infinite Loop)

References

cve@mitre.org (Patch, Vendor Advisory)
cve@mitre.org (vendor-advisory, Broken Link)
cve@mitre.org (vendor-advisory, Broken Link)
cve@mitre.org (vendor-advisory, Broken Link)
cve@mitre.org (mailing-list)

Frequently asked questions

What is CVE-2019-18180?: CVE-2019-18180 is a medium-severity vulnerability in Otrs, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 5.3/10. Published 2019-12-05.
How severe is CVE-2019-18180?: Medium severity. CVSS v3 base score is 5.3 out of 10.