osTicket < v1.16.6 - Cross-Site Scripting

披露于 2023/03/09 · 更新于 2025/10/21

CVSS 评分5.4/ 10.0

EPSS 概率3.6%百分位 87.3%

漏洞描述

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 osTicket 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
osticket_installer osTicket Installer Panel - Detect osTicket	高危	—	—	PoCEXP	2026/07/19
CVE-2026-22200 osTicket - Arbitrary File Read osTicket	高危	—	—	PoCEXP	2026/01/30
CVE-2023-1318 osTicket < v1.16.6 - Cross-Site Scripting osTicket	中危	5.4	7.8%	PoCEXP	2023/03/09
CVE-2023-1315 osTicket < v1.16.6 - Cross-Site Scripting osTicket	中危	5.4	31.0%	PoCEXP	2023/03/09
CVE-2021-45811 osTicket 1.15.x - SQL Injection osTicket	中危	6.5	58.1%	PoCEXP	2021/12/27
CVE-2020-24881 OsTicket < 1.14.3 - Server Side Request Forgery osTicket	严重	9.8	90.6%	PoCEXP	2020/10/10