CVE-2024-21728CWE-601

Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8

Medium · published February 15, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return parameter in the URL to a base64 malicious URL.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.8th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-02-15T20:20Z
EPSS history
Timeline
  • 15 FEB 20:20Z
    Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8
    cvelistv5