Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-21439

DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.

Published

2021-06-14T08:15:10.097

Last Modified

2024-11-21T05:48:21.857

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-754
  • Type: Primary
    CWE-755
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application otrs otrs ≤ 6.0.30 Yes
Application otrs otrs < 7.0.27 Yes
Application otrs otrs < 8.0.14 Yes
References