PT-2019-5834 · Osticket · Osticket
Aishwarya Iyer
·
Published
2019-08-07
·
Updated
2020-08-24
·
CVE-2019-14749
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
osTicket versions prior to 1.10.7
osTicket versions 1.12.x prior to 1.12.1
Description
An issue exists in the export spreadsheets functionality of osTicket, where CSV injection is possible due to unvalidated or unfiltered user input in the
Name and Internal Notes fields in the Users tab, and the Issue Summary field in the tickets tab. This allows other agents to download data in a .csv file format or .xls file format, which can be used as input for spreadsheet applications such as Excel and OpenOffice Calc. As a result, the end user who is accessing the exported spreadsheet can be affected. The vulnerability can be exploited by a remote attacker to execute arbitrary code.Recommendations
For osTicket versions prior to 1.10.7, update to version 1.10.7 or later.
For osTicket versions 1.12.x prior to 1.12.1, update to version 1.12.1 or later.
As a temporary workaround, consider restricting access to the export spreadsheets functionality until a patch is available.
Avoid using the
Name, Internal Notes, and Issue Summary fields in the affected tabs to minimize the risk of exploitation.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Osticket