PT-2017-14022 · Osticket · Osticket

Publicado 2017-10-16 · Atualizado 2017-11-07 · CVE-2017-15362

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions osTicket version 1.10.1

Description The issue allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link. This can lead to session ID and data theft, bypassing CSRF protections, and injection of iframes to establish communication channels. The issue is present after logging into the application.

Recommendations For osTicket version 1.10.1, consider restricting access to the tickets.php file until a fix is available. As a temporary workaround, avoid using the status parameter in the support/scp/tickets.php link to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-15362

Produtos afetados

Osticket

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-15362 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-15362 · Aviso do Fabricante
• https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15362 · Nota