Vulnerabilities > Enhancesoft > Osticket > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-14 CVE-2023-30082 Improper Validation of Specified Quantity in Input vulnerability in Enhancesoft Osticket 1.17.2
A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application.
network
low complexity
enhancesoft CWE-1284
7.5
7.5
2023-04-05 CVE-2022-31888 Session Fixation vulnerability in Enhancesoft Osticket
Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.
network
low complexity
enhancesoft CWE-384
8.8
8.8