Lucene search

K
osvGoogleOSV:CVE-2020-24917
HistoryAug 30, 2020 - 4:15 p.m.

CVE-2020-24917

2020-08-3016:15:14
Google
osv.dev
3

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.6%

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.6%

Related for OSV:CVE-2020-24917