Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2020/01/10 3:08 p.m.•39 views

CVE-2020-1765 Spoofing of From field in several screens

An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce and AgentTicketEmailOutbound. This issue affects: OTRS Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and...

3.5CVSS6.4AI score0.01452EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/10 12:00 a.m.•2 views

CVE-2020-1765: External Control of Assumed-Immutable Web Parameter

An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce and AgentTicketEmailOutbound. This issue affects: OTRS Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and...

5.3CVSS6.1AI score0.01452EPSS
SaveExploits0References2
Rows per page
Query Builder