CVE-2024-43445

Summary

CVE-2024-43445 is a vulnerability affecting various versions of OTRS and OTRS Community Edition. The issue arises from the failure to set the HTTP response header X-Content-Type-Options to nosniff. An attacker can exploit this flaw to upload or insert content that is treated as a different MIME type than intended. This vulnerability poses a risk to OTRS 7.0.X, 8.0.X, 2023.X, and 2024.X, as well as OTRS Community Edition 6.0.x. Products based on the OTRS Community Edition are also likely to be impacted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.