Skip to content
Threat Feed
Subscribe

Product

Community Skeleton (<= 1.1.8)

1 brief RSS
critical advisory

Unauthenticated Administrative Account Creation in UVdesk Community Skeleton

A vulnerability in UVdesk Community Skeleton versions through 1.1.8 allows unauthenticated attackers to reconfigure the database and create super administrator accounts via wizard endpoints.

PoC Community Skeleton web-application authentication-bypass critical-vulnerability
2t 1c updated