CVE-2022-39052: Otrs

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system

Affected products

• Otrs Otrs: from 6.0.0, up to and including 6.0.32; from 7.0.0, before 7.0.39 (fixed in 7.0.39); from 8.0.0, before 8.0.26 (fixed in 8.0.26)

Published 2022-10-17. Last modified 2026-06-17.