Skip to content
OpenAdvisories

Vendor

uvdesk

7 known vulnerabilities.

Products

community-skeleton 5 core-framework 3 uvdesk/community-skeleton 2 support-center-bundle 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-71421

    UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent

    UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege to escalate their own role to administrator. Attackers can submit their own account identif…

    uvdesk community-skeleton core-framework
  • High 7.1
    CVE-2024-3137

    Improper Privilege Management in uvdesk/community-skeleton

    Improper Privilege Management in uvdesk/community-skeleton

    uvdesk uvdesk/community-skeleton uvdesk/core-framework Packagist