PT-2024-11743

CVE-2022-46840

Published

2024-12-13

Updated

2024-12-15

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.7.1

Description The issue affects the JS Help Desk plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This vulnerability exploits broken access control, potentially risking unauthorized access.

Recommendations Update to the latest version to secure your site and mitigate risks associated with broken access control.

Exploitability

Fix

Impacts

Researchers

Re-Alter

v3xx

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers