CVE-2020-11464
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive informati…
Published: 2020-04-01 · CVSS: 6.5 · CVSS 3.0
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7