Description
A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all available CPU and memory.
References (2)
Core 2
Core References
Exploit, Third Party Advisory
https://blog.manavparekh.com/2023/06/cve-2023-30082.html
Exploit, Third Party Advisory
https://github.com/manavparekh/CVEs/blob/main/CVE-2023-30082/Steps%20to%20reproduce.txt
Scores
CVSS v3
7.5
EPSS
0.0100
EPSS Percentile
58.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-1284
Status
published
Products (1)
enhancesoft/osticket
1.17.2
Published
Jun 14, 2023
Tracked Since
Feb 18, 2026