Veille CVE

Recherche « faveosuite faveo-helpdesk »

1 CVE

  1. CVE-2026-111676 4.3 Moyenne

    faveosuite faveo-helpdesk

    Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attackers can enumerate sequential ticketid values on GET /ticket/tooltip to read ticket conversations, including customer personal data and internal agent notes.