← Back to browse · API

CVE-2020-24881

Severity
CRITICAL
CVSS
9.8
EPSS
0.73267
Risk score
64.84
CISA KEV
No
PoC
No
Published
2020-11-02
Modified
2024-08-04
First seen
2026-08-05
Aliases
EUVD-2020-17589, GHSA-M4X8-8RRP-JPC6
Products
enhancesoft:osticket, n/a:n/a n/a
Sources
nvd CVE-2020-24881
euvd EUVD-2020-17589

Description

SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

References