The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Link | Tags |
---|---|
https://wpscan.com/vulnerability/e8a4b6ab-47f8-495d-a22c-dcf914dfb58c | third party advisory vdb entry exploit technical description |