Description
osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly validate the uploaded file's contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content.
Remediation
References
Related Vulnerabilities
MySQL CVE-2024-20983 Vulnerability (CVE-2024-20983)
PHP Integer Overflow or Wraparound Vulnerability (CVE-2019-11048)
WordPress Plugin BuddyPress Members Only Cross-Site Scripting (1.8.3)
WordPress Plugin Erident Custom Login and Dashboard Cross-Site Request Forgery (3.4.1)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-5394)