CVE-2024-21728: Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8
0.0
CVSS
Description
An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return parameter in the URL to a base64 malicious URL.
Classification
CVE ID: CVE-2024-21728
CVSS Base Severity: LOW
CVSS Base Score: 0.0
Affected Products
Vendor: smartcalc.es
Product: osTicky component for Joomla
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.06% (probability of being exploited)
EPSS Percentile: 28.06% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)