TI-2023-21044 CVE-2023-40171
Dispatch writes JWT tokens in error message
Priority HIGH 78
Dispatch is an open source security incident management tool.
3 records
Dispatch is an open source security incident management tool.
There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter.
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted…