CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.
Explanation of Vulnerability in Simple Terms
JS Help Desk versions 2.9.2 and earlier contain a path traversal vulnerability that allows unauthenticated attackers to cause a denial of service by making the application unavailable. The vulnerability requires only network access and no user interaction. The scope is changed, meaning the impact extends beyond the vulnerable component itself.
What an attacker can do
Make the JS Help Desk application unavailable to legitimate users.
Potential impact on your site
Your help desk system could become unavailable to staff and customers without warning or user action.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
