critical9.8
CVE-2021-42235
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionalit…
Impact
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enhancesoft | Osticket | before 1.14.8 from 1.15 before 1.15.4 |