CVE-2023-42233

Pat Infinite Solutions HelpdeskAdvanced software, affected versions

CVE-2023-42229

CVE-2023-42229 affects Pat Infinite Solutions HelpdeskAdvanced, versions 11.0.33 and earlier. The vulnerability is a Directory Traversal via authenticated SOAP requests to the WSConnector service, enabling arbitrary files to be created on the target system. Public documents corroborate the issue ...

CVE-2023-42232

Pat Infinite Solutions HelpdeskAdvanced is affected (versions

CVE-2023-42230

Pat Infinite Solutions HelpdeskAdvanced versions <= 11.0.33 are vulnerable to Cross-Site Scripting (XSS) via the WSCView/Save function. The root cause is XSS in the WSCView/Save workflow, as documented by Red Hat and other sources. Affected product: Pat Infinite Solutions HelpdeskAdvanced

CVE-2023-42231

Pat Infinite Solutions HelpdeskAdvanced

CVE-2023-42225

Pat Infinite Solutions HelpdeskAdvanced

CVE-2023-42234

CVE-2023-42234 affects Pat Infinite Solutions HelpdeskAdvanced

CVE-2023-42226

Pat Infinite Solutions HelpdeskAdvanced

CVE-2023-42227

Pat Infinite Solutions HelpdeskAdvanced

CVE-2023-42228

Pat Infinite Solutions HelpdeskAdvanced ≤ 11.0.33 is vulnerable to Incorrect Access Control. Low-privilege users can edit their own ACL rules by sending a request to the AclList/SaveAclRules administrative function. CVSS 3.1 base score 8.8 (HIGH) indicates potential impact to confidentiality, int...