What’s Vulnerable › Vulnerabilities

CVE-2023-42228

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-13 · updated 2026-06-17
• Weakness: CWE-281

Description

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function.

Affected products

• Zucchetti Helpdeskadvanced: through 11.0.33

References

• https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md

Get alerted when CVE-2023-42228 or the next vulnerability affects your stack