Advisories · Technology
GestSup.
Every CVE that names GestSup among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector
- GestSup
- Cross-site scripting (XSS)
- CVSS 7.1 High
GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter
- GestSup
- Broken access control
- CVSS 5.3 Medium
GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector
- GestSup
- Cross-site scripting (XSS)
- CVSS 9.2 CriticalCritical · CVSS 9+
GestSup before 3.2.62 Remote Code Execution via IMAP Attachment
- GestSup
- Unrestricted file upload
- CVSS 7.7 High
GestSup < 3.2.60 SQL Injection in Ticket Creation
- GestSup
- SQL injection
- CVSS 5.1 Medium
GestSup < 3.2.60 Stored XSS in API Error Logs
- GestSup
- Cross-site scripting (XSS)
- CVSS 7.5 High
GestSup < 3.2.60 Multiple SQL Injections in Asset List
- GestSup
- SQL injection
- CVSS 7.7 High
GestSup < 3.2.60 SQL Injection in Search Bar
- GestSup
- SQL injection
- CVSS 8.9 High
GestSup <= 3.2.60 CSRF Allows Privileged Actions
- GestSup
- Cross-site request forgery (CSRF)