Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-45387 EUVD-2025-16674GHSA-mc52-7658-v986

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.

Published Jun 2, 2025 · Updated Jun 2, 2025 · Assigned by mitre