CVEvulnerability

CVE-2004-0614

6.4 MEDIUM Published 2004-12-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P

Description

osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.

Affected configurations

• osticket osticket sts

References