VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Feb 15, 2024· Updated Jun 17, 2026

CVE-2024-21728

CVE-2024-21728

Description

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return parameter in the URL to a base64 malicious URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • SmartCalc/osTicky2 versions
    cpe:2.3:a:smartcalc:osticky:*:*:*:*:*:joomla\!:*:*+ 1 more
    • cpe:2.3:a:smartcalc:osticky:*:*:*:*:*:joomla\!:*:*range: <2.2.8
    • (no CPE)range: <2.2.8
  • smartcalc.es/osTicky component for Joomlav5
    Range: 2.0.0-2.2.8

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.