Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-3038

HelpDezk Community improper authorization

Description

SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HelpDezk HelpDezk Community

Default version status: unaffected

  • 1.1.10affected

References