CVE-2020-15849

Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method. A malicious actor with access to an administrative account could abuse this vulnerability to recover sensitive data from the application's database, allowing for authorization bypass and taking over additional accounts by means of modifying password-reset tokens stored in the database. Remote command execution is also possible by leveraging this to abuse the Yii framework's bizRule functionality, allowing for arbitrary PHP code to be executed by the application. Remote command execution is also possible by using this together with a separate insecure file upload vulnerability (CVE-2020-15488).

• CWE-89

• https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/Exploit, Third Party Advisory
• https://www.re-desk.com/download-help-desk-software.htmlProduct, Vendor Advisory
• https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/Exploit, Third Party Advisory
• https://www.re-desk.com/download-help-desk-software.htmlProduct, Vendor Advisory

Published

Sep 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15839Liferay Portal before 7.3.3, and Liferay DXP 7.1 before fix …6.5
• CVE-2020-1584An elevation of privilege vulnerability exists in the way th…7.8
• CVE-2020-15840In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and L…5.3
• CVE-2020-15841Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix …8.8
• CVE-2020-15842Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix …8.1
• CVE-2020-15843ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible t…7.3
• CVE-2020-1585A remote code execution vulnerability exists in the way that…8.8
• CVE-2020-15850Insecure permissions in Nakivo Backup & Replication Director…7.8
• CVE-2020-15851Lack of access control in Nakivo Backup & Replication Transp…9.8
• CVE-2020-15852An issue was discovered in the Linux kernel 5.5 through 5.7.…7.8
• CVE-2020-15853supybot-fedora implements the command 'refresh', that refres…5.3
• CVE-2020-15855Two cross-site scripting vulnerabilities were fixed in Bodhi…6.1