Jérôme Maes

The issue is related to improper access control in the Helpdesk App, allowing remote authenticated attackers to gain elevated privileges by sending a crafted request.