210 matches found
CVE-2023-23716
Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zendesk Support for WordPress: from n/a through 1.8.4...
CVE-2023-23716
CVE-2023-23716 affects Zendesk Support for WordPress plugin versions up to 1.8.4, with a Missing Authorization/Broken Access Control issue. The vulnerability stems from incorrectly configured access controls, enabling unauthorized access paths. Public disclosures and patch data indicate a fixed v...
CVE-2023-23716 WordPress Zendesk Support for WordPress plugin <= 1.8.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zendesk Support for WordPress: from n/a through 1.8.4...
CVE-2023-23716 WordPress Zendesk Support for WordPress plugin <= 1.8.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in zendeskofficial Zendesk Support for WordPress zendesk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zendesk Support for WordPress: from n/a through = 1.8.4...
PT-2024-11994 · Zendesk · Zendesk Support For Wordpress
Name of the Vulnerable Software and Affected Versions: Zendesk Support for WordPress versions 1.8.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...
WordPress plugin Zendesk Support for WordPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
The vulnerability of Zendesk’s customer service and sales software, related to improper authorization, allows a hacker to disclose protected information.
The vulnerability of Zendesk’s customer service and sales software is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
Internet Archive (Archive.org) Hacked for Second Time in a Month
The Internet Archive Archive.org suffered a second security breach in October 2024, exposing support tickets through unrotated Zendesk…...
Internet Archive attackers email support users: “Your data is now in the hands of some random guy”
Those who hacked the Internet Archive haven't gone away. Users of the Internet Archive who have submitted helpdesk tickets are reporting replies to the tickets from the hackers themselves. Internet Archive, most known for its Wayback Machine, is a digital library that allows users to look at...
CVE-2024-49193
Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the...
CVE-2024-49193
Zendesk pre-2024-07-02 is affected. The issue arises from processing incoming emails where Cc fields are extracted to grant extra ticket-viewing privileges, combined with an insufficient spoof-detection mechanism and predictable per-ticket support emails. This allows remote attackers to read tick...
Zendesk 安全漏洞
Zendesk is a complete customer service solution from Zendesk USA. A security vulnerability exists in versions of Zendesk prior to 2024-07-02, which stems from insufficient processing of emails in a way that extracts the cc field from incoming email messages to grant additional ticket viewing...
CVE-2024-49193
Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the...
PT-2024-7647 · Zendesk · Zendesk
Name of the Vulnerable Software and Affected Versions: Zendesk versions prior to 2024-07-02 Description: The issue is related to improper authorization in Zendesk, allowing remote attackers to read ticket history via e-mail spoofing. This is because Cc fields are extracted from incoming e-mail...
CVE-2024-49193
Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the...
Samson 安全漏洞
Samson is a Zendesk open source web interface for deployment. A security vulnerability exists in Samson versions prior to v3385 that stems from the presence of insecure deserialization that could lead to remote code execution RCE...
Malicious code in Zendesk.OAuth (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Zendesk.Drivers (NuGet)
--- -= Per source details. Do not edit below this line.=-...
