CVE-2023-1315 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1317 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1315 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1318

osTicket (osticket/osticket) versions prior to 1.16.6 are affected by Cross-site Scripting (XSS) in a generic manner. The vulnerability is described as an XSS flaw in osTicket before 1.16.6, enabling execution of arbitrary JavaScript in the victim’s browser. Affected component is the web applicat...

CVE-2023-1315

CVE-2023-1315: Reflected Cross-Site Scripting in osTicket prior to v1.16.6 (osticket/osticket). An attacker could cause arbitrary JavaScript to run in a victim’s browser. Affected component is the web interface; root cause is reflected XSS. Remediation: upgrade osTicket to a version >= 1.16.6....

CVE-2023-1318 Cross-site Scripting (XSS) - Generic in osticket/osticket

Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1316 Cross-site Scripting (XSS) - Stored in osticket/osticket

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1317 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1316

CVE-2023-1316 is a stored XSS vulnerability in osticket/osticket prior to v1.16.6. Multiple connected sources corroborate that the issue affects osticket/osticket by storing malicious scripts (notably via an email field) and potentially allows data disclosure or scripting in affected sessions. Th...

CVE-2023-1318 Cross-site Scripting (XSS) - Generic in osticket/osticket

Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to v1.16.6...

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A cross-site scripting vulnerability exists in Enhancesoft osTicket versions prior to 1.16.6, which stems from the presence of a stored cross-site scripting XSS vulnerability. The vulnerability ca...

CVE-2023-1317 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open-source ticketing system from Enhancesoft, USA. A cross-site scripting vulnerability exists in Enhancesoft osTicket versions prior to 1.16.6, which stems from a reflective cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to...

CVE-2023-1319 Cross-site Scripting (XSS) - Stored in osticket/osticket

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1320 Cross-site Scripting (XSS) - Stored in osticket/osticket

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1320 Cross-site Scripting (XSS) - Stored in osticket/osticket

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A cross-site scripting vulnerability exists in Enhancesoft osTicket versions prior to 1.16.6, which stems from the presence of a stored cross-site scripting XSS vulnerability. An attacker can...

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A cross-site scripting vulnerability exists in versions prior to Enhancesoft osTicket v1.16.6, which stems from the presence of a Reflected Cross-Site Scripting XSS vulnerability...

PT-2023-16890 · Osticket · Osticket

Name of the Vulnerable Software and Affected Versions: osticket versions prior to 1.16.6 Description: The issue is related to Cross-site Scripting XSS - Generic. This is a type of security vulnerability that occurs when an application includes user input in its output without proper validation or...

CVE-2023-1317

CVE-2023-1317 describes a reflected XSS in osTicket (osticket/osticket) prior to version 1.16.6. The visible impact is that an attacker could cause arbitrary JavaScript to run in a victim’s browser, potentially leading to data theft or unauthorized actions within the user session. The CVE is docu...