NetSight
low3.5

CVE-2010-4760

Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allo…

Impact

Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket.

Affected products

VendorProductAffected versions
OtrsOtrs
through 3.0.0
Versions 0.5, 1.0, 1.0.0, 1.0.1, 1.0.2

Weakness classification

References