{"id":"CVE-2019-14748","title":"An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1","summary":"An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implement…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79","CWE-434"],"vendor":"enhancesoft","product":"osticket","affected":["osticket < 1.10.7","osticket >= 1.12, < 1.12.1"],"patched":["osticket 1.12.1"],"published":"2019-08-07","updated":"2026-07-10","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-14748","references":[{"url":"http://packetstormsecurity.com/files/154003/osTicket-1.12-File-Upload-Cross-Site-Scripting.html","label":"cve@mitre.org"},{"url":"https://github.com/osTicket/osTicket/commit/33ed106b1602f559a660a69f931a9d873685d1ba","label":"cve@mitre.org"},{"url":"https://github.com/osTicket/osTicket/releases/tag/v1.10.7","label":"cve@mitre.org"},{"url":"https://github.com/osTicket/osTicket/releases/tag/v1.12.1","label":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/47224","label":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/154003/osTicket-1.12-File-Upload-Cross-Site-Scripting.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/osTicket/osTicket/commit/33ed106b1602f559a660a69f931a9d873685d1ba","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/osTicket/osTicket/releases/tag/v1.10.7","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/osTicket/osTicket/releases/tag/v1.12.1","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/47224","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.03619,"epssPercentile":0.89008,"exploitAvailable":true,"ingestedAt":"2026-07-10T19:05:51.195Z","exploits":{"exploitdb":true,"checkedAt":"2026-09-21T15:23:40.897Z"},"slug":"CVE-2019-14748","body":"## Overview\n\nAn issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implemented for file content checks; also, the output is not handled properly, causing persistent XSS that leads to cookie stealing or malicious actions. For example, a non-agent user can upload a .html file, and Content-Disposition will be set to inline instead of attachment.\n\n## Affected\n\n- `osticket < 1.10.7`\n- `osticket >= 1.12, < 1.12.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `osticket 1.12.1`","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":29.7,"likelihood":0.7,"exploitation":12,"ransomware":0},"changes":[]}