CVE-2023-1125

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-1125
The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://wpscan.com/vulnerability/e8a4b6ab-47f8-495d-a22c-dcf914dfb58c Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:wpruby:ruby_help_desk:*:*:*:*:*:wordpress:*:*
History

08 May 2023, 17:57

Type Values Removed Values Added
References (MISC) https://wpscan.com/vulnerability/e8a4b6ab-47f8-495d-a22c-dcf914dfb58c - (MISC) https://wpscan.com/vulnerability/e8a4b6ab-47f8-495d-a22c-dcf914dfb58c - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:wpruby:ruby_help_desk:*:*:*:*:*:wordpress:*:*

02 May 2023, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-05-02 08:15

Updated : 2024-02-04 23:37

NVD link : CVE-2023-1125

Mitre link : CVE-2023-1125

CVE.ORG link : CVE-2023-1125

JSON object : View

Products Affected

wpruby

  • ruby_help_desk
CWE

No CWE.