CVE-2023-3038

HelpDezk Community improper authorization

Summary

Original description

The description as published by the source.

SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the application.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web incibe.es

Metadata

CVE: CVE-2023-3038
Published: 2023-10-04
First seen on SecPulse: 3 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-89

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago