CVE-2023-1319

EUVD-2023-23577
Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.8 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
@huntrdevCNA
4.8 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Affected Products (NVD)
VendorProductVersion
enhancesoftosticket
𝑥
< 1.16.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/osticket/osticket/commit/9fb01bc12fbae06aa2c2b4d1bc9b4a08db4bb3e0
https://huntr.dev/bounties/a822067a-d90d-4c3e-b9ef-9b2a5c2bc97f
https://github.com/osticket/osticket/commit/9fb01bc12fbae06aa2c2b4d1bc9b4a08db4bb3e0
https://huntr.dev/bounties/a822067a-d90d-4c3e-b9ef-9b2a5c2bc97f