CVE-2019-14749

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These spreadsheets are generated dynamically from unvalidated or unfiltered user input in the Name and Internal Notes fields in the Users tab, and the Issue Summary field in the tickets tab. This allows other agents to download data in a .csv file format or .xls file format. This is used as input for spreadsheet applications such as Excel and OpenOffice Calc, resulting in a situation where cells in the spreadsheets can contain input from an untrusted source. As a result, the end user who is accessing the exported spreadsheet can be affected.

• CWE-1236

• http://packetstormsecurity.com/files/154004/osTicket-1.12-Formula-Injection.htmlThird Party Advisory, VDB Entry
• https://github.com/osTicket/osTicket/commit/99818486c5b1d8aa445cee232825418d6834f249Patch, Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.10.7Release Notes, Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.12.1Release Notes, Third Party Advisory
• https://www.exploit-db.com/exploits/47225Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/154004/osTicket-1.12-Formula-Injection.htmlThird Party Advisory, VDB Entry
• https://github.com/osTicket/osTicket/commit/99818486c5b1d8aa445cee232825418d6834f249Patch, Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.10.7Release Notes, Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.12.1Release Notes, Third Party Advisory
• https://www.exploit-db.com/exploits/47225Third Party Advisory, VDB Entry

Published

Aug 7, 2019

Last Modified

Jul 10, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14743In Valve Steam Client for Windows through 2019-08-07, HKLM\S…
• CVE-2019-14744In KDE Frameworks KConfig before 5.61.0, malicious desktop f…7.8
• CVE-2019-14745In radare2 before 3.7.0, a command injection vulnerability e…7.8
• CVE-2019-14746A issue was discovered in KuaiFanCMS 5.0. It allows eval inj…
• CVE-2019-14747DWSurvey through 2019-07-22 has stored XSS via the design/my…
• CVE-2019-14748An issue was discovered in osTicket before 1.10.7 and 1.12.x…5.4
• CVE-2019-1475Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14750An issue was discovered in osTicket before 1.10.7 and 1.12.x…6.1
• CVE-2019-14751NLTK Downloader before 3.4.5 is vulnerable to a directory tr…
• CVE-2019-14752SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS…6.1
• CVE-2019-14753SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 h…7.5
• CVE-2019-14754Open-School 3.0, and Community Edition 2.3, allows SQL Injec…