CVE-2024-21728

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return parameter in the URL to a base64 malicious URL.

• CWE-601
• CWE-601

• https://github.com/solracsf/osTickyProduct
• https://github.com/solracsf/osTickyProduct

Published

Feb 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21722The MFA management features did not properly terminate exist…6.3
• CVE-2024-21723Inadequate parsing of URLs could result into an open redirec…4.3
• CVE-2024-21724Inadequate input validation for media selection fields lead …6.1
• CVE-2024-21725Inadequate escaping of mail addresses lead to XSS vulnerabil…6.1
• CVE-2024-21726Inadequate content filtering leads to XSS vulnerabilities in…6.5
• CVE-2024-21727XSS vulnerability in DP Calendar component for Joomla.6.1
• CVE-2024-21729Inadequate input validation leads to XSS vulnerabilities in …6.1
• CVE-2024-2173Out of bounds memory access in V8 in Google Chrome prior to …8.8
• CVE-2024-21730The fancyselect list field layout does not correctly escape …5.4
• CVE-2024-21731Improper handling of input could lead to an XSS vector in th…6.1
• CVE-2024-21732FlyCms through abbaa5a allows XSS via the permission managem…6.1
• CVE-2024-21733Generation of Error Message Containing Sensitive Information…5.3