CVE-2023-30082
Last modified
CVE-2023-30082 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. EPSS estimates a 1.00% chance of exploitation in the next 30 days.
Description
A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all available CPU and memory.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Enhancesoft | Osticket | 1.17.2 |
References
- https://blog.manavparekh.com/2023/06/cve-2023-30082.htmlExploit, Third Party Advisory
- https://github.com/manavparekh/CVEs/blob/main/CVE-2023-30082/Steps%20to%20reproduce.txtExploit, Third Party Advisory
- https://blog.manavparekh.com/2023/06/cve-2023-30082.htmlExploit, Third Party Advisory
- https://github.com/manavparekh/CVEs/blob/main/CVE-2023-30082/Steps%20to%20reproduce.txtExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-30082?
How severe is CVE-2023-30082?
How do I fix CVE-2023-30082?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-3007A vulnerability was found in ningzichun Student Management S…9.8
- CVE-2023-30076Sourcecodester Judging Management System v1.0 is vulnerable …9.8
- CVE-2023-30077Judging Management System v1.0 by oretnom23 was discovered t…9.8
- CVE-2023-30078Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
- CVE-2023-30079Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
- CVE-2023-3008A vulnerability classified as critical has been found in nin…9.8
- CVE-2023-30083Buffer Overflow vulnerability found in Libming swftophp v.0.…5.5
- CVE-2023-30084An issue found in libming swftophp v.0.4.8 allows a local at…5.5
- CVE-2023-30085Buffer Overflow vulnerability found in Libming swftophp v.0.…5.5
- CVE-2023-30086Buffer Overflow vulnerability found in Libtiff V.4.0.7 allow…5.5
- CVE-2023-30087Buffer Overflow vulnerability found in Cesanta MJS v.1.26 al…5.5
- CVE-2023-30088An issue found in Cesanta MJS v.1.26 allows a local attacker…5.5
Are you affected by CVE-2023-30082?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
