CVE-2023-49978

Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators.

Affected products

Customer Support System

oretnom23 Customer Support System

= 1.0

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.8% (55th percentile)

Weakness

CWE-284

NVD status

Analyzed

Published

2024-03-06