CyberSecBulletin

HelpDezk vulnerabilities

We track 2 vulnerabilities in HelpDezk products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 4, 2023.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest HelpDezk vulnerabilities

  • 7.5 High severity

    HelpDezk Community: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2023-3038HelpDezk

    SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the applica

  • 8.6 High severity

    HelpDezk Community: Improper Authorization

    CVE-2023-3037HelpDezk

    Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to access the platform without authentication and retrieve personal data via the jsonGrid parameter.