CVE-2019-18180

Denial of service

Medium · published December 5, 2019

CVSS v3.1
5.3
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g. attaching files to mails) of ((OTRS)) Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: ((OTRS)) Community Edition 5.0.x version 5.0.38 and prior versions; 6.0.x version 6.0.23 and prior versions. OTRS AG: OTRS 7.0.x version 7.0.12 and prior versions.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.02572 · 85.0th percentile
Published
2019-12-05T14:54Z
EPSS history
Timeline
  • 05 DEC 14:54Z
    Denial of service
    cvelistv5