CVE-2023-1724: high-severity vulnerability in Ladybirdweb Faveo Helpdesk
Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.3epss 0.5%
exploitation probability
0.5%top 61% of all CVEs
observed exploitation
nono source reports it
Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Affected products
Ladybirdweb · Faveo Helpdesk