Skip to contentUvdesk Community-skeleton vulnerabilities
- uvdesk support-center-bundle, community-skeleton +1 moreUVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating EndpointCVE-2026-1050295.3 Medium
- uvdesk core-framework, community-skeleton +1 moreUVdesk core-framework before 1.1.7 Privilege Escalation via editAgentCVE-2025-714218.6 High
- uvdesk core-framework, community-skeleton +1 moreUVdesk core-framework before 1.1.7 Authorization Bypass via Saved ReplyCVE-2025-714205.3 Medium
- uvdesk core-framework, community-skeleton +1 moreUVdesk core-framework before 1.1.7 Stored XSS via SwiftMailerCVE-2025-714195.1 Medium
- uvdesk community-skeletonUVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation WizardCVE-2026-928059.3 Critical
- uvdesk community-skeleton, uvdesk/community-skeleton +1 moreImproper Privilege Management in uvdesk/community-skeletonCVE-2024-31377.1 High
- uvdesk community-skeletonUVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks...CVE-2023-37635Public exploit9.8 Critical
- uvdesk community-skeletonUvdesk vulnerable to stored cross-site scripting (XSS)CVE-2023-03256.1 Medium
- uvdesk community-skeletonUvdesk remote code execution vulnerabilityCVE-2023-02658.8 High
- uvdesk community-skeleton, uvdesk/community-skeleton +1 moreCross-site Scripting (XSS) - Stored in uvdesk/community-skeletonCVE-2023-1197Fix available4.3 Medium