CVE-2017-15580
CriticalSummary
osTicket version 1.10.1 allows uploading 'html' files but does not properly validate the contents of the uploaded files, enabling the upload of arbitrary file types, including malicious ones. An attacker can exploit this vulnerability to upload malicious files to the web application.
Risk Assessment
This vulnerability poses a risk of introducing malware onto the server, potentially leading to system compromise and data loss. Organizations should be aware of potential attacks leveraging this flaw.
Recommendation
It is recommended to implement proper validation mechanisms for uploaded files and restrict allowed file types to those that are actually needed. Additionally, monitoring and auditing uploaded files should be conducted to detect potential threats.
Original NVD description (English source)
osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly validate the uploaded file's contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content.