CVE-2023-30082
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-30082
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-30082.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-30082
- Published
- 2023-06-14T20:15:09.453Z
- Modified
- 2025-11-20T12:17:19.490770Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all available CPU and memory.
- References
Affected packages
Git / github.com/osticket/osticket
Affected ranges
- Type
- GIT
- Repo
- https://github.com/osticket/osticket
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
v1.*
v1.10
v1.10-dpr
v1.10-rc.1
v1.10-rc.2
v1.10-rc.3
v1.10.1
v1.10.2
v1.10.3
v1.10.4
v1.10.5
v1.10.6
v1.10.7
v1.11
v1.11.0-rc1
v1.12
v1.12.1
v1.12.2
v1.12.3
v1.12.4
v1.12.5
v1.12.6
v1.14
v1.14-rc1
v1.14-rc2
v1.14.-rc1
v1.14.1
v1.14.2
v1.14.3
v1.14.4
v1.14.5
v1.14.6
v1.14.7
v1.14.8
v1.15
v1.15.1
v1.15.2
v1.15.3
v1.15.3.1
v1.15.4
v1.15.5
v1.15.6
v1.15.7
v1.15.8
v1.16
v1.16.1
v1.16.2
v1.16.3
v1.16.4
v1.16.5
v1.17
v1.17-rc1
v1.17-rc2
v1.17-rc3
v1.17-rc4
v1.17.1
v1.17.2
v1.8-dpr
v1.8.0
v1.8.0-rc1
v1.8.0-rc2
v1.8.0.1
v1.8.0.2
v1.8.0.3
v1.8.1
v1.8.1-dpr
v1.8.1-rc1
v1.8.1.1
v1.8.1.2
v1.8.2-dpr
v1.8.3
v1.8.4
v1.9-rc
v1.9.0
v1.9.1
v1.9.11
v1.9.12
v1.9.2
v1.9.3
v1.9.4
v1.9.4-dpr
v1.9.4-rc1
v1.9.4-rc2
v1.9.4-rc3
v1.9.4-rc4
v1.9.4-rc5
v1.9.5
v1.9.5.1
v1.9.6
v1.9.7
v1.9.8
v1.9.8.1
v1.9.9