Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-115972

FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthController.resolve authorization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/Http/Controllers/Client/helpdesk/UnAuthController.php. Executing a manipulation of the argument id/status can lead to missing authorization. The attack can be launched remotely. The vendor was contacted early about this disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FaveoSuite Faveo Helpdesk

  • 2.0.0affected
  • 2.0.1affected
  • 2.0.2affected
  • 2.0.3affected

References