PT-2025-23544 · Osticket · Osticket

Muhammad Umer Adeem + 1 · Published 2025-06-02 · Updated 2025-06-05 · CVE-2025-45387

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.17.6 and prior to 1.18.2

Description The issue is related to a Broken Access Control Vulnerability in the /scp/ajax.php endpoint. This vulnerability affects osTicket versions prior to 1.17.6 and prior to 1.18.2.

Recommendations For versions prior to 1.17.6, update to version 1.17.6 or later. For versions prior to 1.18.2, update to version 1.18.2 or later. As a temporary workaround, consider restricting access to the /scp/ajax.php endpoint until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-45387

Affected Products

Osticket

References · 9

• 🔥 https://github.com/UmerAdeemCheema/CVE-Security-Research/blob/main/OSTicket/Unauthorized%20Access%20to%20Ajax%20Functions.md · Exploit
• https://github.com/osTicket/osTicket/pull/6802/commits/ab6672faa0991de305d4b90a3faa2e3cebdd23c8 · Patch
• https://osv.dev/vulnerability/CVE-2025-45387 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-45387 · Security Note
• https://github.com/osTicket/osTicket · Note
• https://twitter.com/CVEnew/status/1929592731984097649 · Twitter Post
• https://t.me/cvenotify/124404 · Telegram Post
• https://t.me/cvetracker/25211 · Telegram Post
• https://twitter.com/dailycve/status/1930644872920224061 · Twitter Post