Vulnerabilities > RE Desk
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-09-30 | CVE-2020-15849 | SQL Injection vulnerability in Re-Desk Re:Desk 2.3 Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method. | 6.5 |
| 2020-09-30 | CVE-2020-15488 | Unrestricted Upload of File with Dangerous Type vulnerability in Re-Desk Re:Desk 2.3 Re:Desk 2.3 allows insecure file upload. | 5.0 |
| 2020-09-30 | CVE-2020-15487 | SQL Injection vulnerability in Re-Desk Re:Desk 2.3 Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. | 7.5 |