← CVE Intelligence

CVE-2023-1125

Ruby Help Desk < 1.3.4 - Subscriber+ Ticket Update via IDOR PUBLISHED

Description (CNA)

The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.

Affected (CNA)

Vendor / productVersions
Unknown / Ruby Help Deskaffected 0 before 1.3.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.