CVE-2010-3476: Otrs

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service (CPU consumption) via a large message, a different vulnerability than CVE-2010-2080.

Affected products

• Otrs Otrs: version 2.3.1 only; version 2.3.2 only; version 2.3.3 only; version 2.3.4 only; version 2.3.5 only; version 2.4.1 only; …

Published 2010-09-20. Last modified 2026-06-16.