Vulnerabilidades de Faveosuite
CVEs publicadas que afetam produtos de Faveosuite: 1 registro(s), com severidade, exploração e correções.
CVE-2026-111676
Média · 4.3
CWE-639 16/10/2026
Faveo Helpdesk through 2.0.3 Broken Access Control via /ticket/tooltip Endpoint
Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attackers can enumerate sequential ticketid values on GET /ticket/tooltip to read ticket conversations, including customer personal data and internal agent notes.