Advisories · Technology
osTicket.
Every CVE that names osTicket among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure
- osTicket
- Broken access control
- CVSS 6.4 Medium
Cross-site scripting in osTicket
- osTicket
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
osTicket Dispatcher class.dispatcher.php cross-site request forgery
- osTicket
- Cross-site request forgery (CSRF)
- Broken access control