CVE-2020-15487

CRITICAL 9.8CVE-2020-15487 · Published 30/09/2020 · updated 17/06/2026

In short

CVE-2020-15487 is a CRITICAL (CVSS 9.8) vulnerability affecting re (re-desk).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
re re-desk	`= 2.3`	No fix yet

Description

Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. By modifying the folder GET parameter, it is possible to execute arbitrary SQL statements via a crafted URL. Unauthenticated remote command execution is possible by using this SQL injection to update certain database values, which are then executed by a bizRule eval() function in the yii/framework/web/auth/CAuthManager.php file. Resultant authorization bypass is also possible, by recovering or modifying password hashes and password reset tokens, allowing for administrative privileges to be obtained.

References

labs.f-secure.com/advisories/redesk-v2-3-multiple-issues · Exploit
re-desk.com/download-help-desk-software.html · Vendor Advisory

More vulnerabilities in re

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free