Skip to content
OpenAdvisories

Product · uvdesk

core-framework

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-71420

    UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply

    UVdesk core-framework before 1.1.7 contains an authorization bypass vulnerability in the saved reply endpoint that allows authenticated agents to access replies restricted to other support groups. Attackers with ROLE_AGENT can enumerate saved reply identifier…

    uvdesk community-skeleton core-framework
  • Medium 5.4
    CVE-2025-71419

    UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer

    UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLE_AGENT can inject malicious script into the identifier fi…

    uvdesk community-skeleton core-framework