CVE-2020-24881

CriticalCVSS 9.8

Published: 02/11/2020(UTC)Updated: 10/07/2026(UTC)Translated: 11/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

73.27%

99th percentile - higher than 99% of all known CVEs

SSRF vulnerability in osTicket before version 1.14.3 allows an attacker to add a malicious file to the server or perform port scanning.

An attacker can exploit this vulnerability to access internal network resources, potentially leading to data leakage or further system compromise.

Immediately update osTicket to version 1.14.3 or later, which fixes this vulnerability.

Original NVD description (English source)

SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.