CVE-2023-3037

HelpDezk Community improper authorization

Summary

Original description

The description as published by the source.

Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to access the platform without authentication and retrieve personal data via the jsonGrid parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web incibe.es

Metadata

CVE: CVE-2023-3037
Published: 2023-10-04
First seen on SecPulse: 3 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-285

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago