CVE-2023-1315

Summary

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

Affected Software

Weaknesses

• CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ADP Enrichment

CVE Program Container

Additional References

• https://huntr.dev/bounties/70a7fd8c-7e6f-4a43-9f8c-163b8967b16e
• https://github.com/osticket/osticket/commit/ec6043935b4e30b5c0dfa544e256717182808a2e

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://huntr.dev/bounties/70a7fd8c-7e6f-4a43-9f8c-163b8967b16e
• https://github.com/osticket/osticket/commit/ec6043935b4e30b5c0dfa544e256717182808a2e

• ←Previous
• Next→