Skip to content
OpenAdvisories

Vendor

canove

2 known vulnerabilities.

Products

whaticket-community 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-111709

    WhaTicket Community through commit cf04795 IDOR via /tickets/:ticketId and /messages/:ticketId

    WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply anothe…

    canove whaticket-community