CVE-2020-24881

Severity

critical

Source

NVD · cve

Published

2020-11-02

CVSS

9.8

Reference

shame 35/100

SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

Players implicated

SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

synthesis severe-fallout -0.50

Negative sentiment due to critical SSRF vulnerability in osTicket allowing file upload and port scanning, though sources are generic databases rather than direct vendor condemnation.
cooey ↗ severe-fallout -0.80

Critical vulnerability disclosed

“SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.”
NVD ↗ severe-fallout +0.00

Neutral NVD page
www.cvefind.com ↗ severe-fallout +0.00

Neutral database listing
advisories.gitlab.com ↗ severe-fallout +0.00

Neutral advisory database
www.databreachtoday.com ↗ severe-fallout +0.00

Irrelevant topic
CISA ↗ severe-fallout +0.00

Irrelevant topic
www.vulncheck.com ↗ severe-fallout +0.00

Irrelevant topic

No correlated FedRAMP products.