CVE-2023-1317

Summary

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

Affected Software

Weaknesses

• CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ADP Enrichment

CVE Program Container

Additional References

• https://huntr.dev/bounties/c3e27af2-358b-490b-9baf-e451663e4e5f
• https://github.com/osticket/osticket/commit/daee20fdd8ac926d9aee700b201ac2cb35d448ca

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://huntr.dev/bounties/c3e27af2-358b-490b-9baf-e451663e4e5f
• https://github.com/osticket/osticket/commit/daee20fdd8ac926d9aee700b201ac2cb35d448ca

• ←Previous
• Next→