Components

Ticketing System

Description

The ticketing system is a system of work tickets, grouped by teams.

Tech Stack

Three containers make up the Ticketing System

1. MySQL DB server
2. Node/Express REST API server
3. React single-page app front-end

This app supports both OAuth and Legacy auth

Vulnerabilities

• The HS256 JWT signature uses a secret that appears on wordlists
• A certain API endpoint fails to check the JWT signature at all
• Insufficient authorization control if the user can make themselves appear as admin, such as by manipulating local storage
• XSS flaw in a rich text field
• CORS issue