Security Advisory
CVE-2020-24917
6.1
MEDIUM
Vulnerability Description
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.
Published Date
August 30, 2020
Official Source
NIST NVD Advisory