CVE-2021-42235

Published May 4th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.

osTicket/osTicket

The osTicket open source ticketing system official project repository, for versions 1.8 and later

GitHub

3.81K