CVE-2010-3476

Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML…

published September 20, 2010

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service (CPU consumption) via a large message, a different vulnerability than CVE-2010-2080.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02517 · 84.7th percentile
Published
2010-09-20T21:00Z
EPSS history
Timeline
  • 20 SEP 21:00Z
    Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML…
    cvelistv5