CVE-2022-31889

Опубликовано: 05 апр. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae.

Ссылки

https://checkmarx.com/blog/securing-open-source-solutions-a-study-of-osticket-vulnerabilities/
Exploit
Third Party Advisory
https://github.com/osTicket/osTicket-plugins/commit/047a1c3ae4f12f8952bbdad8143d5b74fdac14b1
Patch
https://checkmarx.com/blog/securing-open-source-solutions-a-study-of-osticket-vulnerabilities/
Exploit
Third Party Advisory
https://github.com/osTicket/osTicket-plugins/commit/047a1c3ae4f12f8952bbdad8143d5b74fdac14b1
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:enhancesoft:audit_log:*:*:*:*:*:osticket:*:*

Версия до 2022-04-21 (исключая)

EPSS

Процентиль: 57%

0.00356

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-5wx7-h6ww-mx8h