CVE-2022-32074

Опубликовано: 13 июл. 2022

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.

Ссылки

https://github.com/osTicket/osTicket-plugins
Product
Third Party Advisory
https://github.com/osTicket/osTicket-plugins/commit/a7842d494889fd5533d13deb3c6a7789768795ae
Patch
Third Party Advisory
https://owasp.org/www-community/attacks/xss/
Third Party Advisory
https://github.com/osTicket/osTicket-plugins
Product
Third Party Advisory
https://github.com/osTicket/osTicket-plugins/commit/a7842d494889fd5533d13deb3c6a7789768795ae
Patch
Third Party Advisory
https://owasp.org/www-community/attacks/xss/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:osticket:osticket:*:*:*:*:*:*:*:*

Версия до 2022-05-19 (исключая)

EPSS

Процентиль: 75%

0.00913

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-qvw5-f6fh-hj9g