uvdesk/community-skeleton

uvdesk/community-skeleton

GitHubGitHub
GitHubgithub.com
www.uvdesk.comwww.uvdesk.com
Releases26
Frequency2 months 3 weeks
Last Release
Stars19.4K
UVdesk Open Source Community Helpdesk is a comprehensive ticketing support system designed for everyone, offering robust features to streamline customer support and collaboration.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2023-37635NVD↗
= 1.1.19.8 CRITICAL—

UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application.

CVE-2023-0265NVD↗
= 1.1.1, <= 1.1.18.8 HIGH—

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.

CVE-2023-0325NVD↗
= 1.1.1, <= 1.1.16.1 MEDIUM—

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket.

CVE-2023-1197NVD↗
< 1.1.04.8 MEDIUM—

Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0.