11 matches found
osticket-stored-xss-security-assessment
CVE-2026-36214 - osTicket 存储型 XSS（通过 Bootstrap Tooltip） 顾问式网络安全报告 针对 osTicket 存储型跨站脚本的专业漏洞评估报告，包括业务影响、修复及缓解策略。 📍 报告快照 字段| 详情 ---|--- 报告类型| 漏洞评估报告 参与背景| 安全研究 主要关注点| Web 应用程序安全 受众| 安全团队、工程团队、招聘经理 输出风格| 高管摘要、技术分析、业务影响、修复路线图 发布状态| 已脱敏，供公开作品集审阅 !IMPORTANT 本报告已特意脱敏，以便在 GitHub...
CVE-2026-36214
CVE-2026-36214 - osTicket における脆弱な Bootstrap Tooltip コンポーネントを介した格納型クロスサイトスクリプティング XSS 説明 Enhancesoft osTicket のバージョン 1.10 から 1.17.7、および 1.18.0 から 1.18.3 には、既知の脆弱性を持つ Bootstrap Tooltip 3.3.4 コンポーネント CVE-2019-8331 が同梱されており、格納型クロスサイトスクリプティング XSS の脆弱性が生じています。デフォルトの osTicket...
CVE-2026-36214
CVE-2026-36214 — osTicket Stored XSS affects osTicket versions 1.10–1.17.7 and 1.18.0–1.18.3 due to a vulnerable Bootstrap Tooltip (3.3.4) and insufficient HTML sanitization. The attack stores a malicious JS payload in a ticket attachment and executes it when an Agent/Admin views the ticket, enab...
CVE-2026-36214
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
CVE-2026-36214
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
Exploit for CVE-2026-36214
─── CVE-2026-36214 ─── 🏴 AMN SECURITY 🏴 مركز أب...
Cross-site Scripting (XSS)
Overview org.webjars.bower:bootstrap is a popular front-end framework for faster and easier web development. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Tooltip and Popover components due to improper neutralization of input during web page generation. An...
bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
The vulnerability of the tooltip component in Bootstrap, a tool for creating websites and web applications, allows attackers to perform cross-site scripting attacks.
The vulnerability of the tooltip component in the Bootstrap toolset for creating websites and web applications is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the tooltip and popover components in Bootstrap’s website and web application creation tools allows attackers to execute cross-site scripting attacks.
The vulnerability of the tooltip and popover components in the Bootstrap toolset for creating websites and web applications is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...