CVE-2023-42228

HIGH 8.8CVE-2023-42228 · Published 13/01/2025 · updated 17/06/2026

In short

CVE-2023-42228 is a HIGH (CVSS 8.8) vulnerability affecting helpdeskadvanced (zucchetti).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 39.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
helpdeskadvanced zucchetti	`≤ 11.0.33`	No fix yet

Description

Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function.

References

gitlab.com/daniele_m/cve-list/-/blob/main/README.md · Third Party Advisory

More vulnerabilities in helpdeskadvanced

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

helpdeskadvanced

zucchetti

≤ 11.0.33

No fix yet

More vulnerabilities in helpdeskadvanced

See all →