Re-desk

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Re-desk records in CISA KEV

No Re-desk vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2020-12194 CVE-2020-15487 · GHSA-q5cw-4q48-3cxj

MEDIUM 48

Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0369 Published 2020-09-30 No fix listed CWE-89

TI-2020-12472 CVE-2020-15849 · GHSA-2wmr-35cq-3r7p

LOW 37

Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02744 Published 2020-09-30 No fix listed CWE-89

TI-2020-12195 CVE-2020-15488 · GHSA-jg8p-jr99-4qfm

LOW 35

Re:Desk 2.3 allows insecure file upload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00984 Published 2020-09-30 No fix listed CWE-434