CVE-2026-14871

CVE-2026-14871 - BOLA / IDOR en osTicket ajax.tickets.php Autorización rota a nivel de objeto BOLA: Referencia directa insegura a objetos IDOR include/ajax.tickets.php → función viewField Reportado por @JF0x0r · 27 de marzo de 2026 Estado: PARCHEADO - Corrección publicada en osTicket v1.17.8 /...

Drupal Viewfield Module Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yes, it's yet another CCK related module with XSS vulnerabilities. It's lame, but it should be reported since the Drupal security team has already made an announcement about the issue in these modules. Drupal security and module maintainer have been...