GestSup vulnerabilities
We track 5 vulnerabilities in GestSup products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2026.
Latest GestSup vulnerabilities
- 8.1 High severity
GestSup: Unrestricted Upload of File with Dangerous Type
GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, wh
- 8.1 High severity
GestSup: Improper Neutralization of Special Elements used in an SQL Command
GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionality. Multiple request parameters used to filter, search, or sort assets are incorporated into SQL queries without sufficient neutralization, allowing an
- 8.1 High severity
GestSup: Improper Neutralization of Special Elements used in an SQL Command
GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacke
- 8.1 High severity
GestSup: Improper Neutralization of Special Elements used in an SQL Command
GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in the search bar functionality. User-controlled search input is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database q
- 8.8 High severity
GestSup: Cross-Site Request Forgery
GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform act