CVE-2023-23679

Name of the Vulnerable Software and Affected Versions JS Help Desk versions 2.7.7 and earlier

Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows accessing functionality not properly constrained by ACLs, which can lead to unauthorized access.

Recommendations For JS Help Desk versions 2.7.7 and earlier, update to a version that contains a fix for this issue, as the current version allows unauthorized access due to improper ACL constraints. At the moment, there is no information about a newer version that contains a fix for this vulnerability.