VULNERABILITY INTELLIGENCE

CVE-2010-4759

CVSS score4 MEDIUM
EPSS probability1.34%
CISA KEVNot currently listed
Published2011-03-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P

Description

Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service (daemon hang) via a fulltext search.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references