Skip to content
Threat Feed
Subscribe

Vendor

UVdesk

2 briefs RSS
high advisory

Privilege Escalation in UVdesk core-framework

An improper privilege management vulnerability in the UVdesk core-framework allows authenticated agents to escalate their privileges to administrator by manipulating the editAgent endpoint.

core-framework
1r 1t 1c
critical advisory

Unauthenticated Administrative Account Creation in UVdesk Community Skeleton

A vulnerability in UVdesk Community Skeleton versions through 1.1.8 allows unauthenticated attackers to reconfigure the database and create super administrator accounts via wizard endpoints.

PoC Community Skeleton web-application authentication-bypass critical-vulnerability
2t 1c updated