CVE-2023-30082

State: Published
Severity: 7.5 High
Published: Jun 14, 2023
Updated: Jan 6, 2025
Reserved: Apr 7, 2023

Description

A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all available CPU and memory.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-1284 Improper Validation of Specified Quantity in Input

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/manavparekh/CVEs/blob/main/CVE-2023-30082/Steps%20to%20reproduce.txt
https://blog.manavparekh.com/2023/06/cve-2023-30082.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.