Vulnerabilities

TI-2020-12472 CVE-2020-15849 · GHSA-2wmr-35cq-3r7p

Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the…

LOW 37

Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02744 Published 2020-09-30 No fix listed CWE-89

TI-2020-12195 CVE-2020-15488 · GHSA-jg8p-jr99-4qfm

LOW 35

Re:Desk 2.3 allows insecure file upload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00984 Published 2020-09-30 No fix listed CWE-434

TI-2020-12194 CVE-2020-15487 · GHSA-q5cw-4q48-3cxj

MEDIUM 48

Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0369 Published 2020-09-30 No fix listed CWE-89