CVE-2020-24881

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

73%p99

Published

Nov 2, 2020 (Nov 2, 2020)

Modified

Jul 10, 2026

Description

SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

Vendors: enhancesoft
Products: osticket
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (73.4%)

In the news0 stories

No ingested article mentions this CVE yet.