Whaticket Community
Approved changes feed: RSS · Atom
cpe:2.3:a:canove:whaticket-community:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Canove (c7f8c255-f436-55eb-aea2-960f3577197a) |
|---|---|
| Product | Whaticket Community (b0ec3941-7778-5318-84bf-17d7388c4c6d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111708 |
vulnerable | 2026-11-03 10:16:11.608087 |
WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup
CRITICAL (9.8)
WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.
Published: 2026-10-16T17:39:59.242Z
Updated: 2026-10-16T19:45:36.979Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111709 |
vulnerable | 2026-11-03 10:16:11.078077 |
WhaTicket Community through commit cf04795 IDOR via /tickets/:ticketId and /messages/:ticketId
MEDIUM (5.4)
WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply another agent's ticket id to GET /tickets/:ticketId and /messages/:ticketId to read full message history and POST WhatsApp replies.
Published: 2026-10-16T17:39:59.914Z
Updated: 2026-10-21T21:20:01.674Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.