title: Host header injection by attachments in web service
description: Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations of the OTRS Generic Interface modules allows  any authenticated attacker to  to perform an host header injection for the ContentType header of the attachment.
This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: affected
modules: Generic Interface
product: OTRS
vendor: OTRS AG
versions:
lessThan: 7.0.45, status: affected, version: 7.0.x, versionType: Patch
lessThan: 8.0.35, status: affected, version: 8.0.x, versionType: Patch
}
{
defaultStatus: affected
modules: Generic Interface
product: ((OTRS)) Community Edition
vendor: OTRS AG
versions:
lessThanOrEqual: 6.0.34, status: affected, version: 6.0.1, versionType: All
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Update to OTRS 8.0.35 or OTRS 7.0.45