Vulnerability · Published Oct 4, 2023 · Assigned by INCIBE
CVE-2023-3037HelpDezk Community improper authorization
High 8.6
In plain English
A high-severity security flaw in HelpDezk Community from HelpDezk. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).
Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.7%top 45.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to access the platform without authentication and retrieve personal data via the jsonGrid parameter.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HelpDezk | HelpDezk Community | 1.1.10 |
Weakness: CWE-285 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L