Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-1542 EUVD-2025-8122GHSA-22wf-h889-r7q7

Improper permission control in OXARI ServiceDesk

Published Mar 26, 2025 · Updated Oct 3, 2025 · Assigned by CERT-PL

Description

Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0.

Affected products

VendorProductAffectedFixed
Infonet Projekt OXARI ServiceDesk < 2.0.324.0 2.0.324.0

References