CVE-2023-27148-osTicket_XSS

[vc_row][vc_column][vc_column_text]Vendor of...

CVE-2023-27149-osTicket_XSS

[vc_row][vc_column][vc_column_text] Vendor...

Unverified Password Changed

[vc_row][vc_column][vc_column_text]                                                            Required...

No Rate Limit

[vc_row][vc_column][vc_column_text]Vendor of...

Weak Password Policy

[vc_row][vc_column][vc_column_text]Vendor of...

Login Brute Force on Login Page 

[vc_row][vc_column][vc_column_text] Login BruteForce  Vendor...

Stored Cross-Site Scripting SXSS

[vc_row][vc_column][vc_column_text] Stored Cross-Site...

Login page – Brute Force attack

Chaining HTML injection to XSS lead to steal Cookie

Race Condition

Response Manipulation Led to Authentication Bypass Vulnerability Description