CVEvulnerability
CVE-2023-30082
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-1284
Description
A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all available CPU and memory.
Affected configurations
• enhancesoft osticket 1.17.2
Related
Weakness · CWE (1)
- CWE-1284 Improper Validation of Specified Quantity in Input weakness
References
- https://blog.manavparekh.com/2023/06/cve-2023-30082.html Exploit, Third Party Advisory
- https://github.com/manavparekh/CVEs/blob/main/CVE-2023-30082/Steps%20to%20reproduce.txt Exploit, Third Party Advisory
- https://blog.manavparekh.com/2023/06/cve-2023-30082.html Exploit, Third Party Advisory
- https://github.com/manavparekh/CVEs/blob/main/CVE-2023-30082/Steps%20to%20reproduce.txt Exploit, Third Party Advisory