CVE-2017-15580: Malicious File Upload
osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly validate the uploaded file's contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15580?
CVE-2017-15580 is considered a critical vulnerability due to the potential for file upload attacks allowing remote code execution.
How do I fix CVE-2017-15580?
To fix CVE-2017-15580, upgrade osTicket to a version that includes proper validation of uploaded file types.
What types of files can be uploaded due to CVE-2017-15580?
CVE-2017-15580 allows unauthorized file types to be uploaded, including executables disguised as HTML files.
Which version of osTicket is affected by CVE-2017-15580?
CVE-2017-15580 specifically affects osTicket version 1.10.1.
What are the potential risks associated with CVE-2017-15580?
The risks associated with CVE-2017-15580 include unauthorized access and execution of malicious files on the server.