Lucene search

K
osvGoogleOSV:CVE-2023-27148
HistoryOct 23, 2023 - 8:15 p.m.

CVE-2023-27148

2023-10-2320:15:08
Google
osv.dev
6
cve-2023-27148
stored cross-site scripting
admin panel
enhancesoft osticket v1.17.2
attackers
arbitrary web scripts
html
role name parameter
software

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.8%

A stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Role Name parameter.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.8%

Related for OSV:CVE-2023-27148