PT-2020-19904
CVE-2020-7993
·
تاريخ النشر
2020-01-27
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Prototype version 1.6.0.1
Description
The issue allows remote authenticated users to forge ticket creation on behalf of other user accounts by modifying the
email ID field.Recommendations
For Prototype version 1.6.0.1, consider restricting access to ticket creation functionality until a patch is available. As a temporary workaround, validate and sanitize the
email ID field to prevent modification and ensure it matches the authenticated user's account. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾