CVEvulnerability
CVE-2010-4071
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-01-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail.
Affected configurations
• otrs otrs 2.4.1
• otrs otrs 2.4.2
• otrs otrs 2.4.3
• otrs otrs 2.4.4
• otrs otrs 2.4.5
• otrs otrs 2.4.6
• otrs otrs 2.4.7
• otrs otrs 2.4.8
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bugs.gentoo.org/342687 bugs.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html lists.opensuse.org
- http://otrs.org/advisory/OSA-2010-03-en/ Vendor Advisory
- http://secunia.com/advisories/41978 Vendor Advisory
- http://www.osvdb.org/68882 www.osvdb.org
- http://www.vuxml.org/freebsd/96e776c7-e75c-11df-8f26-00151735203a.html www.vuxml.org
- http://bugs.gentoo.org/342687 bugs.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html lists.opensuse.org
- http://otrs.org/advisory/OSA-2010-03-en/ Vendor Advisory
- http://secunia.com/advisories/41978 Vendor Advisory
- http://www.osvdb.org/68882 www.osvdb.org
- http://www.vuxml.org/freebsd/96e776c7-e75c-11df-8f26-00151735203a.html www.vuxml.org