CVE record · 1 source
CVE-2026-114393
CVSS 4.3Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify tickets outside their groups via…
- CVSS
- 4.3
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify tickets outside their groups via…
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify tickets outside their groups via PUT /api/v1/tickets/:id and PUT /api/v2/tickets/batch. Attackers can supply…