Vulnerabilities CVE-2026-48244

CVE-2026-48244

Medium

Open

TLP:CLEAR

Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.

Details

CVSS Score: 6.9
EPSS Score ⓘ: 0.22%

13.1th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: May 21, 2026
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.