Security Advisory

CVE-2023-46967

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-20 00:00:00
Last updated 2024-08-06 16:35:06
Assigner mitre
State PUBLISHED

Description

Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket.