Security Advisory

CVE-2023-1724

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-24 00:13:34
Last updated 2024-11-27 19:53:59
Assigner Fluid Attacks
State PUBLISHED

Description

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS.