What is GHSA-57q5-h622-3cpx?

GHSA-57q5-h622-3cpx is a security advisory published by GitHub Security Advisories with High severity. UVDesk Community Helpdesk Improper Privilege Management

Which CVE IDs does GHSA-57q5-h622-3cpx cover?

GHSA-57q5-h622-3cpx covers the following CVE IDs: CVE-2024-3137. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-57q5-h622-3cpx?

GHSA-57q5-h622-3cpx has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

Which products are affected by GHSA-57q5-h622-3cpx?

GHSA-57q5-h622-3cpx affects 1 product, including: composer/uvdesk/core-framework:\u003c= 1.1.1.

GHSA-57q5-h622-3cpxHighCVSS 7.1

UVDesk Community Helpdesk Improper Privilege Management

Vendor

GitHub Security Advisories

Published

April 2, 2024

Last Modified

April 2, 2024

🔗 CVE IDs covered (1)

CVE-2024-3137 →

📋 Description

Improper Privilege Management in uvdesk/community-skeleton

🎯 Affected products1

composer/uvdesk/core-framework:<= 1.1.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-3137
https://huntr.com/bounties/faf74783-644c-40cd-aa98-2239e5fafcd1
https://github.com/uvdesk/core-framework/blob/master/Controller/Thread.php#L44
https://github.com/advisories/GHSA-57q5-h622-3cpx