medium4.3
CVE-2010-4766
The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows…
Impact
The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a standard e-mail client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | through 2.4.6 Versions 0.5, 1.0, 1.0.0, 1.0.1, 1.0.2 |