osTicket Server-Side Request Forgery (SSRF) Vulnerability - CVE-2020-24881 - Vulnerability Database

osTicket Server-Side Request Forgery (SSRF) Vulnerability - CVE-2020-24881

Critical

Reference: CVE-2020-24881

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-24881

Title: osTicket Server-Side Request Forgery (SSRF) Vulnerability

Overview:

SSRF exists in osTicket before 1.14.3 where an attacker can add malicious file to server or perform port scanning.