Re-Desk Re\:desk
3 CVEs affecting Re-Desk Re\:desk. Latest disclosed: 2020-09-30. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15487 | Critical | 9.8 | 2020-09-30 | Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. By modifyin… |
CVE-2020-15488 | High | 7.5 | 2020-09-30 | Re:Desk 2.3 allows insecure file upload. |
CVE-2020-15849 | High | 7.2 | 2020-09-30 | Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method. A malicious actor with… |