CVE-2019-12248
EUVD-2019-389017.06.2019, 18:15
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. An attacker could send a malicious email to an OTRS system. If a logged-in agent user quotes it, the email could cause the browser to load external image resources.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| otrs | otrs | 5.0.0 ≤ 𝑥 ≤ 5.0.36 |
| otrs | otrs | 6.0.0 ≤ 𝑥 ≤ 6.0.19 |
| otrs | otrs | 7.0.0 ≤ 𝑥 ≤ 7.0.7 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References