CVE-2023-30082

PoC ×2—

CVSS 3.1

7.5 high

EPSS

<1%p61

Published

Jun 14, 2023 (Jun 14, 2023)

Modified

Jun 17, 2026

Description

A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all available CPU and memory.

Vendors: enhancesoft
Products: osticket
Weakness: CWE-1284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.