CVE-2020-12629
MEDIUMosTicket < 1.14.2 - Stored Cross-Site Scripting via SLA Name
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-12629. PoCs published by Mehmet Kelepçe, mkelepce.
AI-analyzed exploit summary This exploit demonstrates a persistent authenticated XSS vulnerability in osTicket 1.14.1. The vulnerability allows an attacker to inject malicious JavaScript via the 'name' parameter in the SLA plan, which executes when viewed by other users, potentially stealing cookie information.
Description
include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.
Exploits (2)
This exploit demonstrates a persistent authenticated XSS vulnerability in osTicket 1.14.1. The vulnerability allows an attacker to inject malicious JavaScript via the 'name' parameter in the SLA plan, which executes when viewed by other users, potentially stealing cookie information.
This PoC demonstrates a persistent authenticated XSS vulnerability in osTicket 1.14.1 via the 'name' parameter in the SLA plan update request. The exploit injects malicious JavaScript into the SLA name field, which executes when viewed by an authenticated user.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N