Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthorized parties. Additionally, it leaked ticket authentication code, making it possible to make changes to a ticket.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Deskpro 信息泄露漏洞
Vulnerability Description
Deskpro是英国Deskpro公司的一套帮助台软件。该软件包括客户关系管理组件等，提供电子邮件、即时聊天和语音等功能。 Deskpro 2019.8.0之前版本中存在安全漏洞，该漏洞源于/api/tickets端点无法正确验证用户权限。攻击者可利用该漏洞获取敏感信息以及票据验证码，进而修改票据。
CVSS Information
N/A
Vulnerability Type
N/A