CVE-2022-31888 Information

Description

Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.

Reference

https://checkmarx.com/blog/securing-open-source-solutions-a-study-of-osticket-vulnerabilities/ https://github.com/osTicket/osTicket/commit/85a76f403a3a116176d0798f39a4c430181d8364 https://github.com/osTicket/osTicket/releases/tag/v1.16.3