Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:55:19 +0000 cnvd-2020-22254 https://cve.radiocsirt.org/vuln/cnvd-2020-22254 cnvd-2020-22254 https://cve.radiocsirt.org/vuln/cnvd-2020-22254 EUVD-2026-40593 https://cve.radiocsirt.org/vuln/euvd-2026-40593 EUVD-2026-40593 https://cve.radiocsirt.org/vuln/euvd-2026-40593 fkie_cve-2020-11466 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11466 <p>An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user&#39;s privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthorized parties. Additionally, it leaked ticket authentication code, making it possible to make changes to a ticket.</p> <p>An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user&#39;s privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthorized parties. Additionally, it leaked ticket authentication code, making it possible to make changes to a ticket.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11466 GHSA-r6x8-c338-2jr5 https://cve.radiocsirt.org/vuln/ghsa-r6x8-c338-2jr5 <p>An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user&#39;s privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthorized parties. Additionally, it leaked ticket authentication code, making it possible to make changes to a ticket.</p> <p>An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user&#39;s privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthorized parties. Additionally, it leaked ticket authentication code, making it possible to make changes to a ticket.</p> https://cve.radiocsirt.org/vuln/ghsa-r6x8-c338-2jr5 gsd-2020-11466 https://cve.radiocsirt.org/vuln/gsd-2020-11466 gsd-2020-11466 https://cve.radiocsirt.org/vuln/gsd-2020-11466