Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2010-4071
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4071

2022-10-0316:21:05
Debian Security Bug Tracker
security-tracker.debian.org
8
cve-2010-4071
cross-site scripting
otrs 2.4.x
richtext
html e-mail
unix

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

62.3%

Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail.

OSVersionArchitecturePackageVersionFilename
Debian11allotrs2< 2.4.9+dfsg1-1otrs2_2.4.9+dfsg1-1_all.deb

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

62.3%