CVE-2026-48245
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.
Risk Assessment
The organization is at risk of unauthorized API key usage, potentially leading to unexpected Google Cloud charges and data exposure.
Recommendation
It is recommended to immediately update Open ISES Tickets to version 3.44.2 or later, and revoke and regenerate the Google Maps API key.
Original NVD description (English source)
Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.