CVE

Id
57843  
CVE No.
CVE-2012-4600  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags.  
Phase
Assigned (20120822)  
Votes
None (candidate not yet proposed)  
Comments