NetSight
IP …
medium6.5

CVE-2018-16587

In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS sys…

Impact

In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.

Affected products

VendorProductAffected versions
OtrsOpen Ticket Request System
from 4.0.0 before 4.0.32
from 5.0.0 before 5.0.30
from 6.0.0 before 6.0.11
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

CWE-20

References