CVE-2017-15362

{"id": "CVE-2017-15362", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2017-10-16T01:29:00.997", "references": [{"url": "https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176."}, {"lang": "es", "value": "osTicket 1.10.1 permite la ejecuci\u00f3n de c\u00f3digo JavaScript arbitrario en el lado del cliente en v\u00edctimas que hagan clic en un enlace manipulado support/scp/tickets.php?status=, lo que tambi\u00e9n se conoce como Cross-Site Scripting (XSS). Como consecuencia, pueden tener lugar el robo de ID de sesi\u00f3n y de datos, as\u00ed como la posibilidad de que se omitan protecciones CSRF, la inyecci\u00f3n de iframes para establecer canales de comunicaci\u00f3n, etc. Esta vulnerabilidad est\u00e1 presente despu\u00e9s del inicio de sesi\u00f3n en la aplicaci\u00f3n. Esto afecta a un archivo tickets.php diferente de CVE-2015-1176."}], "lastModified": "2024-11-21T03:14:33.090", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:osticket:osticket:1.10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FD9CB41-1BE8-4825-998E-9A204D5C2D35"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}