Back to the CVE list
CVE-2020-24881

Server-side request forgery in Enhancesoft Osticket

CVSS score

9.8

EPSS probability

%73.4

Risk score

7.2

Published

6 y ago

OverviewPublic Exploits (5)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

E
osTicket 1.14.2 - SSRF
Exploit-DB

osTicket 1.14.2 - SSRF

Exploit referenceSource updated: 19.01.2021 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24881.yaml
Nuclei

Nuclei: OsTicket < 1.14.3 - Server Side Request Forgery

Exploit reference
N
http://packetstormsecurity.com/files/160995/osTicket-1.14.2-Server-Side-Request-Forgery.html
NVD reference

http://packetstormsecurity.com/files/160995/osTicket-1.14.2-Server-Side-Request-Forgery.html

Exploit reference
N
https://blackbatsec.medium.com/cve-2020-24881-server-side-request-forgery-in-osticket-eea175e147f0
NVD reference

https://blackbatsec.medium.com/cve-2020-24881-server-side-request-forgery-in-osticket-eea175e147f0

Exploit reference
G
harshtech123/cve-2020-24881
GitHub

harshtech123/cve-2020-24881

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-24881"