CVE-2021-42235 | BDVDB-2026-175236 Detail

Description#

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/osTicket/osTicket/commit/e28291022e662ffa754e170c09cade7bdadf3fd9

Exploit#

No public exploit known

History#

Version 12022-05-04Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.