CVE-2008-7281

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2008-7281

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2008-7281.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2008-7281

Downstream

DEBIAN-CVE-2008-7281

Published

2011-03-18T16:55:01Z

Modified

2026-04-10T03:40:31.831015Z

Summary

[none]

Details

Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-mail address information by reading this field.

References

http://bugs.otrs.org/show_bug.cgi?id=2814
http://bugs.otrs.org/show_bug.cgi?id=1882
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807

CVE-2008-7281

Affected packages