CVE-2026-102373

MEDIUMCVSS 6.5

Description

GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can enumerate sequential comment IDs to read private comments from other users' tickets without proper authorization checks.

Timeline

Published:September 29th, 2026 1:16 AM

Last modified:September 29th, 2026 1:16 AM

CVSS Scoring

CVSS v3: 6.5 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-639

References & Reports

Advisories, patches, and third-party reports

https://gestsup.fr/index.php?page=changelog
https://gestsup.fr/index.php?page=download
https://gestsup.fr/index.php?page=download&channel=stable&version=3.2.62&type=patch
https://www.vulncheck.com/advisories/gestsup-before-3.2.62-private-ticket-comment-disclosure-via-threadedit-parameter

Source: NIST NVD · Data may lag official sources by up to one minute