CVE-2020-24917 Blast Radius

MEDIUM • CVSS 6.1osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2020-24917.

Start Free Scan →← Back to CVE-2020-24917