Lucene search
HistoryDec 06, 2004 - 5:00 a.m.
CVE-2004-0614
osticket
document upload
security vulnerability
cve-2004-0614
6.9 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
67.8%
osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.
| CPE | Name | Operator | Version |
|---|---|---|---|
| osticket:osticket_sts | osticket osticket sts | eq | * |
Related
nessus
nessus
osTicket Form Field Modification File Upload Size Restriction Bypass
2004-07-14 00:00:00
cvelist
cvelist
CVE-2004-0614
2004-06-30 04:00:00
openvas
openvas
osTicket < 1.2.7 Large Attachment Vulnerability - Active Check
2005-11-03 00:00:00
6.9 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
67.8%
Related for CVE-2004-0614