Skip to content
OpenAdvisories

Product · uvdesk

core-framework

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-71421

    UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent

    UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege to escalate their own role to administrator. Attackers can submit their own account identif…

    uvdesk community-skeleton core-framework