CVE-2023-37635

2023-10-2321:15:08

Google

osv.dev

cve-2023-37635

uvdesk

community skeleton

brute force

vulnerability

unauthenticated attackers

access

application

software

7.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.5%

UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application.

CPENameOperatorVersion
community-skeletoneq1.1.1
community-skeletoneq1.1.0

CPE	Name	Operator	Version
	community-skeleton	eq	1.1.1
	community-skeleton	eq	1.1.0

References

www.esecforte.com/cve-2023-37635-login-bruteforce/