Security Advisory

CVE-2025-45387

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-02 00:00:00
Last updated 2025-06-02 20:33:09
Assigner mitre
State PUBLISHED

Description

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.