CVE-2023-1319: Cross-site Scripting (XSS) - Stored in osticket/osticket
Published Mar 10, 2023
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.
Affected Software
1 affected component
Enhancesoft osTicket<1.16.6
Remediation
Event History
Mar 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-1319?
CVE-2023-1319 is a vulnerability related to Cross-site Scripting (XSS) in the GitHub repository osticket/osticket prior to v1.16.6.
2
What is Cross-site Scripting (XSS)?
Cross-site Scripting (XSS) is a vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
3
How severe is CVE-2023-1319?
CVE-2023-1319 has a severity rating of 4.8 out of 10, which is considered medium.
4
How does CVE-2023-1319 affect Enhancesoft osTicket?
CVE-2023-1319 affects Enhancesoft osTicket versions prior to v1.16.6, allowing for stored XSS attacks.
5
How can I fix CVE-2023-1319?
To fix CVE-2023-1319, upgrade your Enhancesoft osTicket installation to version 1.16.6 or later.