CVE-2020-11466

CVE-2020-11466 affects Deskpro before 2019.8.0. The /api/tickets endpoint imperfectly validates user privileges, allowing an attacker to retrieve arbitrary information about all tickets and to obtain the ticket authentication code. This can lead to leaking sensitive ticket data and, in some cases...