Information Disclosure Vulnerability in OTRS before 3.0.0-beta6

CVE-2010-4760 · LOW Severity

AV:N/AC:M/AU:S/C:P/I:N/A:N

Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket.

Learn more about our User Device Pen Test.