PT-2017-14022 · Osticket · Osticket

Published 2017-10-16 · Updated 2017-11-07 · CVE-2017-15362

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions osTicket version 1.10.1

Description The issue allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link. This can lead to session ID and data theft, bypassing CSRF protections, and injection of iframes to establish communication channels. The issue is present after logging into the application.

Recommendations For osTicket version 1.10.1, consider restricting access to the tickets.php file until a fix is available. As a temporary workaround, avoid using the status parameter in the support/scp/tickets.php link to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-15362

Affected Products

Osticket

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-15362 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15362 · Vendor Advisory
• https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15362 · Note