2025-06-02 00:00:00
mitre
PUBLISHED
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.