CVE-2019-14748

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implemented for file content checks; also, the output is not handled properly, causing persistent XSS that leads to cookie stealing or malicious actions. For example, a non-agent user can upload a .html file, and Content-Disposition will be set to inline instead of attachment.

• CWE-79
• CWE-434

• http://packetstormsecurity.com/files/154003/osTicket-1.12-File-Upload-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/osTicket/osTicket/commit/33ed106b1602f559a660a69f931a9d873685d1baPatch, Release Notes, Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.10.7Release Notes, Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.12.1Third Party Advisory
• https://www.exploit-db.com/exploits/47224Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/154003/osTicket-1.12-File-Upload-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/osTicket/osTicket/commit/33ed106b1602f559a660a69f931a9d873685d1baPatch, Release Notes, Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.10.7Release Notes, Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.12.1Third Party Advisory
• https://www.exploit-db.com/exploits/47224Exploit, Third Party Advisory, VDB Entry

Published

Aug 7, 2019

Last Modified

Jul 10, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1474An information disclosure vulnerability exists when the Wind…5.5
• CVE-2019-14743In Valve Steam Client for Windows through 2019-08-07, HKLM\S…
• CVE-2019-14744In KDE Frameworks KConfig before 5.61.0, malicious desktop f…7.8
• CVE-2019-14745In radare2 before 3.7.0, a command injection vulnerability e…7.8
• CVE-2019-14746A issue was discovered in KuaiFanCMS 5.0. It allows eval inj…
• CVE-2019-14747DWSurvey through 2019-07-22 has stored XSS via the design/my…
• CVE-2019-14749An issue was discovered in osTicket before 1.10.7 and 1.12.x…8.8
• CVE-2019-1475Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14750An issue was discovered in osTicket before 1.10.7 and 1.12.x…6.1
• CVE-2019-14751NLTK Downloader before 3.4.5 is vulnerable to a directory tr…
• CVE-2019-14752SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS…6.1
• CVE-2019-14753SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 h…7.5