GHSA-57q5-h622-3cpx

Source

https://github.com/advisories/GHSA-57q5-h622-3cpx

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-57q5-h622-3cpx/GHSA-57q5-h622-3cpx.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-57q5-h622-3cpx

Aliases

CVE-2024-3137

Published

2024-04-02T03:30:43Z

Modified

2024-04-02T15:57:02Z

Severity

7.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N CVSS Calculator

Summary

UVDesk Community Helpdesk Improper Privilege Management

Details

Improper Privilege Management in uvdesk/community-skeleton

Database specific

{
    "cwe_ids":  [
        "CWE-269"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-04-02T15:14:26Z",
    "nvd_published_at":  "2024-04-02T01:15:51Z",
    "severity":  "HIGH"
}

References

Affected packages

Packagist / uvdesk/core-framework

Package

Name: uvdesk/core-framework
Purl: pkg:composer/uvdesk/core-framework

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.1.1

Affected versions

v1.*

v1.0.0

v1.0.1

v1.0.3

v1.0.4

v1.0.6

v1.0.7

v1.0.8

v1.0.9

v1.0.10

v1.0.11

v1.0.12

v1.0.13

v1.0.14

v1.0.15

v1.0.16

v1.0.17

v1.1.0

v1.1.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-57q5-h622-3cpx/GHSA-57q5-h622-3cpx.json"