1441 matches found
CVE-2023-51538
Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5...
CVE-2023-51538
CVE-2023-51538 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin Awesome Support – WordPress HelpDesk & Support Plugin for versions up to 6.1.5. The connected Red Hat advisory and ENISA entries also reference this CVE/issue as CSRF affecting that plugin. The available document...
CVE-2023-51538: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5...
CVE-2023-51547
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...
CVE-2023-51547
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...
CVE-2023-51547
CVE-2023-51547 affects Fluent Support (WordPress plugin) up to version 1.7.6. It is an authenticated SQL Injection caused by improper neutralization of input in SQL commands. Impact per sources is high; patch status is Patched, but no fixed version is specified in the provided documents. Recommen...
CVE-2023-51547: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...
CVE-2023-48323
CVE-2023-48323: CSRF in Awesome Support for WordPress (plugin: Awesome Support – WordPress HelpDesk & Support Plugin) affects versions 6.1.4 (6.1.5). The CVE’s CVSS from NVD is 8.8 in one metric, but NVD’s entry here (and related Red Hat/EU ENISA summaries) align with a lower overall assessment; ...
CVE-2023-48323: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.4...
GitLab Security Breach
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab that stems from the possibility of...
HackerOne: Unauthorized Ticket can be created by an Attacker in user's Helpdesk account
An unauthorized user was able to create tickets in any user's helpdesk account without authorization or knowledge...
WordPress WordPress HelpDesk & Support Ticket System Plugin – Octrace Support Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
Software WordPress HelpDesk & Support Ticket System Plugin – Octrace Support Type Plugin Vulnerable versions = 1.2.4 Fixed in 1.2.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
CVE-2023-38068
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...
CVE-2023-38068
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...
Design/Logic Flaw
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...
CVE-2023-38068
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...
CVE-2023-38068
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2023.1.16597 that...
PT-2023-26280
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2023.1.16597 Description The issue concerns improper validation of captcha for Helpdesk forms. Recommendations For versions prior to 2023.1.16597, update to version 2023.1.16597 or later to resolve the issu...