CVE-2020-15487 - CVE House
Back to Database
Status published Critical CVE-2020-15487

Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in...

Vulnerability Description

Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. By modifying the folder GET parameter, it is possible to execute arbitrary SQL statements via a crafted URL. Unauthenticated remote command execution is possible by using this SQL injection to update certain database values, which are then executed by a bizRule eval() function in the yii/framework/web/auth/CAuthManager.php file. Resultant authorization bypass is also possible, by recovering or modifying password hashes and password reset tokens, allowing for administrative privileges to be obtained.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-15487

Credits & Attribution

No credits recorded in the NVD database.

References

More from re-desk

View All →
CVE-2020-15849
Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in...
High 7.2
CVE-2020-15488
Re:Desk 2.3 allows insecure file upload....
High 7.5

Affected Vendor

Affected Software

re\
Vulnerable Versions:
desk

Timeline

Official Publish: September 30th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.