Security Advisory

CVE-2023-1125

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-05-02 07:04:52

Last updated 2025-01-30 14:51:08

Assigner WPScan

State PUBLISHED

Description

The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.

← Browse all CVEs View on cve.org ↗