| Package | Affected versions | Patched versions |
|---|---|---|
| sysaid | < 23.2.15< 23.2.50 | 23.2.1523.2.50 |
SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free