CVE-2020-1765CWE-472

Spoofing of From field in several screens

Low · published January 10, 2020

CVSS v3.1
3.5
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce and AgentTicketEmailOutbound. This issue affects: ((OTRS)) Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01452 · 73.2th percentile
Weakness
CWE-472 · External Control of Assumed-Immutable Web Parameter
Published
2020-01-10T15:08Z
EPSS history
Timeline
  • 10 JAN 15:08Z
    Spoofing of From field in several screens
    cvelistv5