Packagist/uvdesk/core-framework CVE-2024-3137: high 7.1, EPSS 0.36%
UVDesk Community Helpdesk Improper Privilege Management
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-57q5-h622-3cpx
- https://nvd.nist.gov/vuln/detail/CVE-2024-3137
- https://github.com/uvdesk/core-framework
- https://github.com/uvdesk/core-framework/blob/master/Controller/Thread.php#L44
- https://huntr.com/bounties/faf74783-644c-40cd-aa98-2239e5fafcd1
CVE-2024-3137 · published · modified · JSON