Ruby Help Desk, CVE-2023-1125

CVE, Research URL: CVE-2023-1125
Home page URL: Security reports for Ruby Help Desk
Application: Ruby Help Desk
Published on: May 02, 2023
Research Description: The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.
Affected versions: Min -, max 1.3.4.
Status: vulnerable