https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:19:14.283907+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-12123 CVE-2024-12123 — Unauthorized Modification of Ticket Requester 2026-10-07T23:19:14.301672+00:00

Affected: Issuetrak

A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user.

When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy.  The ticket requester can be changed from the original requester to another user in the same application, which the application then accepts.