CVE-2024-43445

creationtimestamp| type| source ---|---|--- 2025-01-27 06:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3x64gg2c 2025-01-27 06:51:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113898992865129761 2025-01-27 07:07:53+00:00| seen|...

CVE-2024-43445

A vulnerability exists in OTRS and OTRS Community Edition that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerability by uploading or inserting content that would be treated as a different MIME type than intended. This issue affects:...

CVE-2024-43445 Missing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffing

A vulnerability exists in OTRS and OTRS Community Edition that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerability by uploading or inserting content that would be treated as a different MIME type than intended. This issue affects:...