Advisories · Technology
uvdesk community-skeleton.
Every CVE that names uvdesk community-skeleton among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint
- uvdesk support-center-bundle
- uvdesk community-skeleton
- Broken access control
- CVSS 8.6 High
UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent
- uvdesk core-framework
- uvdesk community-skeleton
- Privilege escalation
- CVSS 5.3 Medium
UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply
- uvdesk core-framework
- uvdesk community-skeleton
- Broken access control
- CVSS 5.1 Medium
UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer
- uvdesk core-framework
- uvdesk community-skeleton
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard
- uvdesk community-skeleton
- Authentication bypass