Approved changes feed: RSS · Atom

cpe:2.3:a:uvdesk:community-skeleton:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

VendorUvdesk (4b6b10f2-df87-5e03-966d-44d93b5e951e)
ProductCommunity Skeleton (2f86d59c-676b-5a48-a5f1-fd9119a81598)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/uvdesk/community-skeleton purl2cpe 2026-06-01 10:12:25.475346
pkg:github/uvdesk/community-skeleton purl2cpe 2026-06-01 10:12:25.475348

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37635 vulnerable 2026-06-08 06:08:15.837468 Details available
UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application.
Published: 2023-10-23T00:00:00.000Z
Updated: 2024-09-11T19:52:39.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0325 vulnerable 2026-06-08 05:52:04.751729 Details available
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket.
Published: 2023-04-04T00:00:00.000Z
Updated: 2025-02-13T16:22:05.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0265 vulnerable 2026-06-08 05:52:04.642970 Details available
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.
Published: 2023-04-04T00:00:00.000Z
Updated: 2025-02-13T16:25:08.320Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.