CVE-2023-30082

A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket…

High · published June 14, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all available CPU and memory.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00999 · 62.4th percentile
Published
2023-06-14T00:00Z
EPSS history
Timeline
  • 14 JUN 00:00Z
    A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket…
    cvelistv5