EUVD-2026-109244

Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects...

CVE-2021-31868: Missing Authentication for Critical Function

Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket in the legacy ticketing feature, regardless of the assignment of the ticket. This issue was resolved in version 6.6.96, released on August 4, 2021...

PT-2021-19556

Name of the Vulnerable Software and Affected Versions: Rapid7 Nexpose versions 6.6.95 and earlier Description: The issue allows authenticated users of the Security Console to view and edit any ticket in the legacy ticketing feature, regardless of the assignment of the ticket. This was resolved in...

Joomla! JS Support Ticket Cross-Site Request Forgery Vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . JS Support Ticket is used in which a set of open source ticketing system plug-ins . A cross-site request forgery vulnerability...