Faveo Helpdesk
Approved changes feed: RSS · Atom
cpe:2.3:a:ladybird_web_solution:faveo_helpdesk:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ladybird Web Solution (7fe4cc7d-110a-5c1c-a735-16807807064f) |
|---|---|
| Product | Faveo Helpdesk (3e45e039-2966-5b7c-9a53-af7569fd2759) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-72554 |
vulnerable | 2026-09-16 04:33:08.528440 |
Ladybird Web Solution Faveo Helpdesk - Broken Access Control
MEDIUM (6.5)
A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered customer to read ticket conversations belonging to other customers via the v1 REST API. The API verifies the existence of the requested ticket but not ownership, enabling any authenticated user to access arbitrary ticket threads including internal agent notes containing sensitive information.
Published: 2026-08-11T11:11:15.328Z
Updated: 2026-08-11T15:17:06.829Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.