Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:uvdesk:community_skeleton:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Unauthenticated Administrative Account Creation in UVdesk Community Skeleton

A vulnerability in UVdesk Community Skeleton versions through 1.1.8 allows unauthenticated attackers to reconfigure the database and create super administrator accounts via wizard endpoints.

PoC Community Skeleton web-application authentication-bypass critical-vulnerability
2t 1c updated