CVE-2021-21439CWE-754

Possible DoS attack using a special crafted URL in email body

Medium · published June 14, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00877 · 58.6th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2021-06-14T07:55Z
EPSS history
Timeline
  • 14 JUN 07:55Z
    Possible DoS attack using a special crafted URL in email body
    cvelistv5