Open ISES Tickets
Moderate fix1 remedy
Moderate fix1 remedy
- < 3.44.2
Open ISES Tickets Hardcoded Google Maps API Key Vulnerability
Vulnerability
Patched
A vulnerability exists in Open ISES Tickets versions prior to 3.44.2, where a hardcoded Google Maps API key is embedded in 'tables.php'. This key, committed to the public source repository, can be extracted by anyone with read access and used for Google Maps Platform requests, potentially leading to unauthorized charges on the original owner's Google Cloud project.
Impact
The hardcoded API key could be misused for Google Maps Platform requests, causing financial charges to the key owner.
Reproduction
The vulnerability can be reproduced by accessing the 'tables.php' file in the source code repository of Open ISES Tickets versions prior to 3.44.2'. The hardcoded Google Maps API key can be found in this file and extracted for unauthorized use.
Remediation
Users are advised to upgrade to Open ISES Tickets version 3.44.2 or later, where this vulnerability has been patched.
Added: May 21, 2026, 6:31 PM
Updated: May 21, 2026, 6:31 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
8.4remediation
0.0relevance
8.5threat
4.8urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.