// For flags

CVE-2021-21439

Possible DoS attack using a special crafted URL in email body

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.

El ataque de DoS puede ser llevado a cabo cuando un correo electrónico contiene una URL especialmente diseñada en el cuerpo. Puede conllevar a un alto uso de la CPU y causar una baja calidad de servicio, o en caso extremo llevar el sistema a una parada. Este problema afecta a: OTRS AG ((OTRS)) Community Edition versión 6.0.x, 6.0.1 y versiones posteriores. OTRS AG OTRS versión 7.0.x, 7.0.26 y versiones anteriores; versión 8.0.x, 8.0.13 y versiones anteriores

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-12-29 CVE Reserved
  • 2021-06-14 CVE Published
  • 2024-02-28 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-754: Improper Check for Unusual or Exceptional Conditions
  • CWE-755: Improper Handling of Exceptional Conditions
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Otrs
Search vendor "Otrs"
 Otrs
Search vendor "Otrs" for product "Otrs"
 >= 6.0.1 <= 6.0.30
Search vendor "Otrs" for product "Otrs" and version " >= 6.0.1 <= 6.0.30"
community
Affected
Otrs
Search vendor "Otrs"
 Otrs
Search vendor "Otrs" for product "Otrs"
 >= 7.0.0 < 7.0.27
Search vendor "Otrs" for product "Otrs" and version " >= 7.0.0 < 7.0.27"
-
Affected
Otrs
Search vendor "Otrs"
 Otrs
Search vendor "Otrs" for product "Otrs"
 >= 8.0.0 < 8.0.14
Search vendor "Otrs" for product "Otrs" and version " >= 8.0.0 < 8.0.14"
-
Affected