CVE-2021-42235

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.

Date published : 2022-05-04

https://github.com/osTicket/osTicket/commit/e28291022e662ffa754e170c09cade7bdadf3fd9