CVE-2005-3895

Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail…

published November 29, 2005

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue moderator attempts to download the attachment, which allows remote attackers to execute arbitrary web script or HTML. NOTE: this particular issue is referred to as XSS by some sources.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02050 · 81.1th percentile
Published
2005-11-29T21:00Z
EPSS history
Timeline
  • 29 NOV 21:00Z
    Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail…
    cvelistv5