CVE-2023-3038
HelpDezk Community improper authorization
Résumé
HelpDezk Community improper authorization
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the application.
Références
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es