Vulnerability Details CVE-2023-42228
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.5%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2023-42228
-
cpe:2.3:a:zucchetti:helpdeskadvanced:-
-
cpe:2.3:a:zucchetti:helpdeskadvanced:11.0.33