CVE-2021-36695

Name of the Vulnerable Software and Affected Versions Deskpro versions 2021.1.6

Description The issue is related to a cross-site scripting (XSS) vulnerability in the download file feature on a manager profile. This is due to a lack of input validation, allowing for potential exploitation.

Recommendations For Deskpro version 2021.1.6, update to Deskpro 2021.1.7 to resolve the issue. As a temporary workaround, consider restricting access to the download file feature on manager profiles until the update is applied.