writeups.xyz / Securing Open-Source Solutions: A Study of osTicket Vulnerabilities

Submitter : c2a

Date: 14 February 2023

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Reflected XSS
• SQL Injection
• Session Fixation

Programs :

• Enhancesoft (OsTicket)

Authors :

• Miguel Correia
• Davide Teixeira

Link :
https://checkmarx.com/blog/securing-open-source-solutions-a-study-of-osticket-vulnerabilities/