Unrated severityNVD Advisory· Published May 2, 2023· Updated Jan 30, 2025
Ruby Help Desk < 1.3.4 - Subscriber+ Ticket Update via IDOR
CVE-2023-1125
Description
The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Ruby Help Deskdescription
- Range: <1.3.4
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e8a4b6ab-47f8-495d-a22c-dcf914dfb58cmitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.