Vulnerabilities

TI-2023-01247 CVE-2023-1320 · GHSA-rmpq-m25p-jvvr

Cross-site Scripting (XSS) - Stored in osticket/osticket

MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00624 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01246 CVE-2023-1319 · GHSA-292m-rvrj-457h

MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00473 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01245 CVE-2023-1318 · GHSA-qj56-r3xc-5qwh

MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01015 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01244 CVE-2023-1317 · GHSA-3q24-rrgq-j66h

MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01015 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01243 CVE-2023-1316 · GHSA-56xv-vr33-49x9

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01242 CVE-2023-1315 · GHSA-726f-x7cp-crqc

MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01059 Published 2023-03-10 Fixed in v1.16.6 CWE-79