VYPR
← All advisories
Medium severity5.3NVD Advisory· Published May 21, 2026· Updated May 21, 2026

CVE-2026-48244

CVE-2026-48244

Description

Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Openises/Ticketsreferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <3.44.2

Patches

Vulnerability mechanics

References

3

News mentions

1