CVE-2020-11466

An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthoriz...

PT-2020-12629

Name of the Vulnerable Software and Affected Versions Deskpro versions prior to 2019.8.0 Description An issue was discovered where the "/api/tickets" endpoint failed to properly validate a user's privilege. This allowed an attacker to retrieve arbitrary information about all helpdesk tickets stor...

CVE-2020-11466: Improper Privilege Management

An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthoriz...