Description SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning. Remediation References CVE-2020-24881 Related Vulnerabilities CherryPy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0252) MySQL CVE-2018-2646 Vulnerability (CVE-2018-2646) Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-34798) MediaWiki Other Vulnerability (CVE-2013-4570) Dolibarr Improper Input Validation Vulnerability (CVE-2022-0174) Severity Critical Classification CVE-2020-24881 CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities