PT-2025-1460 · Pat Infinite Solutions · Helpdeskadvanced

Published 2025-01-13 · Updated 2025-01-14 · CVE-2023-42234

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pat Infinite Solutions HelpdeskAdvanced versions 11.0.33 and earlier

Description The issue is related to Cross Site Request Forgery (CSRF) via the WSCView function. This allows for unauthorized actions to be performed on behalf of a user without their knowledge or consent.

Recommendations For versions 11.0.33 and earlier, consider disabling the WSCView function as a temporary workaround until a patch is available. Restrict access to the WSCView function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-42234

Affected Products

Helpdeskadvanced

References · 5

• https://osv.dev/vulnerability/CVE-2023-42234 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-42234 · Security Note
• https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md · Note
• https://twitter.com/CVEnew/status/1878932398034841999 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1878995923453325719 · Twitter Post