Improper Restriction of Rendered UI Layers or Frames

Description The osTicket uses an incorrect method to validate the src attribute of the iframe tag. Although it appears that osTicket restricts domains through a whitelist, attackers can easily bypass this restriction. Proof of Concept This iframe is going to render www.youtube.com.attacker's serv...

osTicket < 1.16.6, 1.17.x < 1.17.3 Multiple XSS Vulnerabilities

osTicket is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2023-1318

Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1316

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1319

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1315

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1317

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to v1.16.6...

EUVD-2023-23576

Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1319 Cross-site Scripting (XSS) - Stored in osticket/osticket

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1316 Cross-site Scripting (XSS) - Stored in osticket/osticket

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1318: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1319: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A cross-site scripting vulnerability exists in versions prior to Enhancesoft osTicket v1.16.6, which stems from the presence of a stored cross-site scripting XSS vulnerability...

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A cross-site scripting vulnerability exists in versions prior to Enhancesoft osTicket v1.16.6, which stems from the presence of a cross-site scripting XSS vulnerability...

CVE-2023-1319

CVE-2023-1319 concerns a stored Cross-site Scripting (XSS) vulnerability in the osTicket project (osticket/osticket) prior to version 1.16.6. The consolidated sources confirm an XSS flaw that persists when user-supplied input is stored and later reflected in responses, with public references tyin...