GitHub Advisoryadvisory · Packagist

GHSA-57q5-h622-3cpx UVDesk Community Helpdesk Improper Privilege Management

HIGH Published 2024-04-02 Modified 2024-04-02 Official page ↗

Aliases: CVE-2024-3137
Ecosystem: Packagist
Packages: uvdesk/core-framework
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Weaknesses: CWE-269
Reviewed: 2024-04-02

Affected packages

• Packagist uvdesk/core-framework: <= 1.1.1 (no fix yet)

Description

Improper Privilege Management in uvdesk/community-skeleton

Related

Alias · CVE (1)

CVE-2024-3137 Improper Privilege Management in uvdesk/community-skeleton vulnerability

Weakness · CWE (1)

CWE-269 Improper Privilege Management weakness

References