---
id: CVE-2019-14748
title: An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1
summary: >-
  An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1.
  The Ticket creation form allows users to upload files along with queries. It
  was found that the file-upload functionality has fewer (or no) mitigations
  implement…
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'
cwe:
  - CWE-79
  - CWE-434
vendor: enhancesoft
product: osticket
affected:
  - osticket < 1.10.7
  - 'osticket >= 1.12, < 1.12.1'
patched:
  - osticket 1.12.1
published: '2019-08-07'
updated: '2026-07-10'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2019-14748'
references:
  - url: >-
      http://packetstormsecurity.com/files/154003/osTicket-1.12-File-Upload-Cross-Site-Scripting.html
    label: cve@mitre.org
  - url: >-
      https://github.com/osTicket/osTicket/commit/33ed106b1602f559a660a69f931a9d873685d1ba
    label: cve@mitre.org
  - url: 'https://github.com/osTicket/osTicket/releases/tag/v1.10.7'
    label: cve@mitre.org
  - url: 'https://github.com/osTicket/osTicket/releases/tag/v1.12.1'
    label: cve@mitre.org
  - url: 'https://www.exploit-db.com/exploits/47224'
    label: cve@mitre.org
  - url: >-
      http://packetstormsecurity.com/files/154003/osTicket-1.12-File-Upload-Cross-Site-Scripting.html
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://github.com/osTicket/osTicket/commit/33ed106b1602f559a660a69f931a9d873685d1ba
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://github.com/osTicket/osTicket/releases/tag/v1.10.7'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://github.com/osTicket/osTicket/releases/tag/v1.12.1'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.exploit-db.com/exploits/47224'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - exploit-available
epss: 0.02733
epssPercentile: 0.85486
exploitAvailable: true
ingestedAt: '2026-07-10T19:05:51.195Z'
exploits:
  exploitdb: true
  checkedAt: '2026-09-24T07:52:46.793Z'
---

## Overview

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implemented for file content checks; also, the output is not handled properly, causing persistent XSS that leads to cookie stealing or malicious actions. For example, a non-agent user can upload a .html file, and Content-Disposition will be set to inline instead of attachment.

## Affected

- `osticket < 1.10.7`
- `osticket >= 1.12, < 1.12.1`

## Remediation

Upgrade past the affected range:

- `osticket 1.12.1`