PT-2022-26513 · Osticket · Osticket

Legoclones · Published 2022-12-02 · Updated 2022-12-05 · CVE-2022-4271

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.16.4

Description The issue is related to Cross-site Scripting (XSS) - Reflected, which was found in the GitHub repository osticket/osticket.

Recommendations For versions prior to 1.16.4, update to version 1.16.4 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4271

Affected Products

Osticket

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4271.json · Exploit
• 🔥 https://huntr.dev/bounties/a11c922f-255a-412a-aa87-7f3bd7121599 · Exploit
• https://github.com/osticket/osticket/commit/5213ff138c6be6144a6692376ac0803a42eca168 · Patch
• https://osv.dev/vulnerability/CVE-2022-4271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4271 · Security Note
• https://t.me/cibsecurity/53805 · Telegram Post