629 matches found
CVE-2023-1319
CVE-2023-1319 concerns a stored Cross-site Scripting (XSS) vulnerability in the osTicket project (osticket/osticket) prior to version 1.16.6. The consolidated sources confirm an XSS flaw that persists when user-supplied input is stored and later reflected in responses, with public references tyin...
CVE-2023-1317 Cross-site Scripting (XSS) - Reflected in osticket/osticket
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...
Enhancesoft osTicket 跨站脚本漏洞
Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A cross-site scripting vulnerability exists in versions prior to Enhancesoft osTicket v1.16.6, which stems from the presence of a cross-site scripting XSS vulnerability...
CVE-2023-1320
The CVE-2023-1320 entry concerns a stored XSS vulnerability in osticket/osticket prior to v1.16.6. The vulnerability affects the web application’s handling of user-supplied input, enabling an attacker to inject script that can be executed in an authenticated user’s browser, potentially accessing ...
CVE-2023-1318
osTicket (osticket/osticket) versions prior to 1.16.6 are affected by Cross-site Scripting (XSS) in a generic manner. The vulnerability is described as an XSS flaw in osTicket before 1.16.6, enabling execution of arbitrary JavaScript in the victim’s browser. Affected component is the web applicat...
CVE-2023-1316
CVE-2023-1316 is a stored XSS vulnerability in osticket/osticket prior to v1.16.6. Multiple connected sources corroborate that the issue affects osticket/osticket by storing malicious scripts (notably via an email field) and potentially allows data disclosure or scripting in affected sessions. Th...
CVE-2023-1318 Cross-site Scripting (XSS) - Generic in osticket/osticket
Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to v1.16.6...
CVE-2023-1316 Cross-site Scripting (XSS) - Stored in osticket/osticket
Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...
CVE-2023-1317
CVE-2023-1317 describes a reflected XSS in osTicket (osticket/osticket) prior to version 1.16.6. The visible impact is that an attacker could cause arbitrary JavaScript to run in a victim’s browser, potentially leading to data theft or unauthorized actions within the user session. The CVE is docu...
CVE-2023-1315
CVE-2023-1315: Reflected Cross-Site Scripting in osTicket prior to v1.16.6 (osticket/osticket). An attacker could cause arbitrary JavaScript to run in a victim’s browser. Affected component is the web interface; root cause is reflected XSS. Remediation: upgrade osTicket to a version >= 1.16.6....
CVE-2023-1320 Cross-site Scripting (XSS) - Stored in osticket/osticket
Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...
Multiple XSS Vulnerabilities in Queue Condition
Description Cross-Site Scripting XSS vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request that, if issued by another application user, will cause JavaScript code...
osTicket < 1.16.4 XSS Vulnerability
osTicket is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
CVE-2022-4271
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
PT-2022-26513 · Osticket · Osticket
Name of the Vulnerable Software and Affected Versions: osTicket versions prior to 1.16.4 Description: The issue is related to Cross-site Scripting XSS - Reflected, which was found in the GitHub repository osticket/osticket. Recommendations: For versions prior to 1.16.4, update to version 1.16.4 o...
Enhancesoft osTicket 跨站脚本漏洞
Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A security vulnerability exists in Enhancesoft osTicket versions prior to 1.16.4. The vulnerability stems from setting an ordinary user's username as the XSS payload, and then placing the same XSS...