Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2020-1765

Spoofing of From field in several screens

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce and AgentTicketEmailOutbound. This issue affects: ((OTRS)) Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG ((OTRS)) Community Edition

  • 5.0.x version 5.0.39 and prior versionsaffected
  • 6.0.x version 6.0.24 and prior versionsaffected

OTRS AG OTRS

  • 7.0.x version 7.0.13 and prior versionsaffected

References