CVE-2025-45387

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...

PT-2025-23544 · Osticket · Osticket

Name of the Vulnerable Software and Affected Versions: osTicket versions prior to 1.17.6 and prior to 1.18.2 Description: The issue is related to a Broken Access Control Vulnerability in the /scp/ajax.php endpoint. This vulnerability affects osTicket versions prior to 1.17.6 and prior to 1.18.2...

PT-2023-16889 · Osticket · Osticket

Name of the Vulnerable Software and Affected Versions: osTicket versions prior to 1.16.6 Description: The issue is related to Cross-site Scripting XSS - Reflected, which affects the GitHub repository osticket/osticket. Recommendations: For versions prior to 1.16.6, update to version 1.16.6 or lat...