Filtered by vendor Faveosuite
Subscriptions
Filtered by product Faveo Helpdesk
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-115972 | 1 Faveosuite | 2 Faveo-helpdesk, Faveo Helpdesk | 2026-10-24 | 5.3 Medium |
| A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/Http/Controllers/Client/helpdesk/UnAuthController.php. Executing a manipulation of the argument id/status can lead to missing authorization. The attack can be launched remotely. The vendor was contacted early about this disclosure. | ||||
| CVE-2026-115973 | 1 Faveosuite | 2 Faveo-helpdesk, Faveo Helpdesk | 2026-10-24 | 7.3 High |
| A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. The attack may be initiated remotely. The vendor was contacted early about this disclosure. | ||||
Page 1 of 1.