CVE-2020-24917
30.08.2020, 16:15
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.
Vendor | Product | Version |
---|---|---|
osticket | osticket | 𝑥 < 1.14.3 |
𝑥
= Vulnerable software versions
References