VULNERABILITY INTELLIGENCE
CVE-2022-31888
CVSS score8.8 HIGH
EPSS probability1.21%
CISA KEVNot currently listed
Published2023-04-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.
Weakness classification
- CWE-384: Session Fixation
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org — Patch
- cve@mitre.org — Release Notes
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes