Recherche « faveosuite faveo-helpdesk »
1 CVE
Critique 0
Élevée 0
Moyenne 1
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« faveosuite faveo-helpdesk » ✕
-
CVE-2026-111676 4.3 Moyenne
faveosuite faveo-helpdesk
Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attackers can enumerate sequential ticketid values on GET /ticket/tooltip to read ticket conversations, including customer personal data and internal agent notes.