writeups.xyz / Pitfalls of Desanitization: Leaking Customer Data from osTicket

Submitter : c2a

Date: 6 February 2024

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Security Code Review

Programs :

• Enhancesoft (OsTicket)

Authors :

• Oskar Zeino-Mahmalat

Link :
https://www.sonarsource.com/blog/pitfalls-of-desanitization-leaking-customer-data-from-osticket/