CVE record · 1 source
CVE-2026-114392
CVSS 4.3Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside their groups via GET…
- CVSS
- 4.3
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside their groups via GET…
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside their groups via GET /api/v1/tickets/:uid. Attackers can enumerate sequential ticket uids to read every…