high8.8
CVE-2022-31888
Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.
Impact
Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enhancesoft | Osticket | through 1.16.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://checkmarx.com/blog/securing-open-source-solutions-a-study-of-osticket-vulnerabilities/
- https://github.com/osTicket/osTicket/commit/85a76f403a3a116176d0798f39a4c430181d8364
- https://github.com/osTicket/osTicket/releases/tag/v1.16.3
- https://checkmarx.com/blog/securing-open-source-solutions-a-study-of-osticket-vulnerabilities/
- https://github.com/osTicket/osTicket/commit/85a76f403a3a116176d0798f39a4c430181d8364
- https://github.com/osTicket/osTicket/releases/tag/v1.16.3