CPE
An improper privilege management vulnerability in the UVdesk core-framework allows authenticated agents to escalate their privileges to administrator by manipulating the editAgent endpoint.