CVE-2026-38444

6.1 Moyenne

Publiée le 03/08/2026 à 21:16 · Modifiée le 31/08/2026 à 21:33 · Analyse NVD reportée · Source : cve@mitre.org

Description

osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header display name. The value is extracted without sanitization in include/class.mailparse.php and stored raw in the poster field of ost_thread_entry. When an unauthenticated attacker sends a reply email to an existing ticket from an unregistered address with an XSS payload in the From display name.

Traduire en français

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.1 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://github.com/fr3akhacks/cve-disclosures/blob/master/osTicket/CVE-2026-38444.md
https://github.com/osTicket/osTicket/blob/develop/include/class.mailparse.php
https://github.com/osTicket/osTicket/commit/c54a6ac79de42cff35b453882d1d94cd38adb17f

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories