CVE-2010-4760
Fixed in a distro release EPSS 1%
Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket.
Products: otrs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | otrs2 | 3.0.8+dfsg1-1 |