16 matches found
osticket-stored-xss-security-assessment
CVE-2026-36214 - Bootstrap Tooltip を介した osTicket の保存型XSS コンサルタント形式のサイバーセキュリティレポート osTicket の保存型クロスサイトスクリプティングに関するプロフェッショナルな脆弱性評価レポート。ビジネスへの影響、是正措置、緩和戦略を含みます。 📍 レポート概要 項目| 詳細 ---|--- レポート種別| 脆弱性評価レポート エンゲージメントの文脈| セキュリティ研究 主な焦点| Webアプリケーションセキュリティ 想定読者| セキュリティチーム、エンジニアリングチーム、採用担当者 出力スタイル|...
CVE-2026-36214
CVE-2026-36214 - Cross-Site Scripting XSS Almacenado en osTicket mediante el componente vulnerable Bootstrap Tooltip Descripción Las versiones de Enhancesoft osTicket desde la 1.10 hasta la 1.17.7 y desde la 1.18.0 hasta la 1.18.3 incluyen el componente conocido como vulnerable Bootstrap Tooltip...
EUVD-2026-43754
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
CVE-2026-36214: Improper Neutralization of Input During Web Page Generation
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
CVE-2026-36214
CVE-2026-36214 — osTicket Stored XSS affects osTicket versions 1.10–1.17.7 and 1.18.0–1.18.3 due to a vulnerable Bootstrap Tooltip (3.3.4) and insufficient HTML sanitization. The attack stores a malicious JS payload in a ticket attachment and executes it when an Agent/Admin views the ticket, enab...
CVE-2026-36214
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
CVE-2026-36214
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
CVE-2026-36214
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
PT-2026-58103
Name of the Vulnerable Software and Affected Versions osTicket versions 1.10 through 1.17.7 osTicket versions 1.18.0 through 1.18.3 Description Stored Cross-Site Scripting XSS occurs due to insufficient HTML sanitization and a vulnerable Bootstrap Tooltip component. This allows remote attackers t...
Exploit for CVE-2026-36214
─── CVE-2026-36214 ─── 🏴 AMN SECURITY 🏴 مركز أب...
Exploit for CVE-2026-36214
CVE-2026-36214 - Stored Cross-Site Scripting XSS in osTicket...
Cross-site Scripting (XSS)
Overview org.webjars.bower:bootstrap is a popular front-end framework for faster and easier web development. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Tooltip and Popover components due to improper neutralization of input during web page generation. An...
bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
The vulnerability of the tooltip component in Bootstrap, a tool for creating websites and web applications, allows attackers to perform cross-site scripting attacks.
The vulnerability of the tooltip component in the Bootstrap toolset for creating websites and web applications is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the tooltip and popover components in Bootstrap’s website and web application creation tools allows attackers to execute cross-site scripting attacks.
The vulnerability of the tooltip and popover components in the Bootstrap toolset for creating websites and web applications is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...