Approved changes feed: RSS · Atom

cpe:2.3:a:issuetrak:issuetrak:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIssuetrak (b7d8c4f6-fd0f-5e9b-8965-1f4c3f8d78e0)
ProductIssuetrak (f6daea58-e3b5-5f1f-9c4c-bfd0b292c184)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12123 vulnerable 2026-06-08 06:23:51.303540 Unauthorized Modification of Ticket Requester
A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user.  When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy.  The ticket requester can be changed from the original requester to another user in the same application, which the application then accepts.
Published: 2024-12-04T03:26:00.918Z
Updated: 2024-12-04T14:09:11.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11479 vulnerable 2026-06-08 06:23:49.697391 Authenticated HTML Injection in Issuetrak Ticket Comment Function
A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. HTML markup could be added to comments of tickets, which when submitted will render in the emails sent to all users on that ticket.
Published: 2024-12-04T00:23:39.944Z
Updated: 2024-12-04T14:49:43.102Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.