PT-2023-31437 · Unknown · Customer Support System
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Customer Support System version v1
Description
A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization.
Recommendations
For Customer Support System version v1, consider restricting access to sensitive directories and files to minimize the risk of exploitation. As a temporary workaround, review and adjust the application's authorization settings to ensure proper access controls are in place.
Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Customer Support System