CVE-2025-71420
Received Received - Intake

Authorization Bypass in UVdesk Core-Framework

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: VulnCheck

Description
UVdesk core-framework before 1.1.7 contains an authorization bypass vulnerability in the saved reply endpoint that allows authenticated agents to access replies restricted to other support groups. Attackers with ROLE_AGENT can enumerate saved reply identifiers and read content reserved for groups and teams they do not belong to.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-21
Last Modified
2026-09-21
Generated
2026-09-21
AI Q&A
2026-09-21
EPSS Evaluated
N/A
NVD
CVE-2025-71420
EUVD
EUVD-2025-210976

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
uvdesk core-framework to 1.1.7 (exc)
uvdesk community-skeleton to 1.1.8 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-71420 is an authorization bypass vulnerability in UVdesk core-framework versions before 1.1.7. It allows authenticated agents with ROLE_AGENT to access saved replies restricted to other support groups by enumerating saved reply identifiers. The issue stems from insufficient access control checks in functions like getSavedReplyContent and loadTicketSavedReplies.

Detection Guidance

To detect this vulnerability, monitor for unauthorized access to saved replies by checking server logs for repeated requests to saved reply endpoints. Look for agents accessing replies outside their assigned groups. Use network traffic analysis to identify enumeration attempts of saved reply IDs.

Impact Analysis

Attackers with agent privileges could read sensitive saved replies belonging to other support groups or teams. This may lead to unauthorized access to confidential ticket data, internal communications, or sensitive customer information. The vulnerability enables data leakage without requiring elevated privileges beyond ROLE_AGENT.

Compliance Impact

This vulnerability could violate compliance requirements by exposing protected data. GDPR may be breached if personal data is accessed without authorization. HIPAA could be violated if protected health information is exposed. Organizations using UVdesk must ensure proper access controls to maintain regulatory compliance.

Mitigation Strategies

Immediately upgrade UVdesk core-framework to version 1.1.7 or later and community-skeleton to 1.1.8 or later. Implement strict role-based access controls to restrict saved reply access to authorized agents only. Review and audit saved reply permissions to ensure no unauthorized access exists.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-71420. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart