CVE-2023-3038

HIGH 7.5CVE-2023-3038 · Published 04/10/2023 · updated 17/06/2026

In short

CVE-2023-3038 is a HIGH (CVSS 7.5) vulnerability affecting helpdezk (helpdezk).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
helpdezk helpdezk	`= 1.1.10`	No fix yet

Description

SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the application.

References

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-helpdezk-community · Third Party Advisory

More vulnerabilities in helpdezk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

helpdezk

= 1.1.10

No fix yet

More vulnerabilities in helpdezk

See all →