Vulnerabilities

TI-2022-13729 CVE-2022-31890 · GHSA-qw96-mrmv-h5qw

SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before…

HIGH 82

SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae via the order parameter to the getOrder function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01503 Published 2023-04-05 No fix listed CWE-89

TI-2022-13728 CVE-2022-31889 · GHSA-5wx7-h6ww-mx8h

Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in…

MEDIUM 60

Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00651 Published 2023-04-05 No fix listed CWE-79

Vulnerabilities

Filters

SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before…

Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in…