CVE-2018-16587 in Open Ticket Request System
Resumen
por MITRE
In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.
VulDB is the best source for vulnerability data and more expert information about this specific topic.