CVE-2026-18818 PUBLISHED

Ehco1996 django-sspanel Support Ticket views.py TicketDetailView authorization

Assigner: VulDB
Reserved: 04.08.2026 Published: 04.08.2026 Updated: 04.08.2026

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
CVSS Score: 5.3

Product Status

Vendor Ehco1996
Product django-sspanel
Versions
  • Version 2023.12.0 is affected
  • Version 2023.12.1 is affected
  • Version 2023.12.2 is affected
  • Version 2023.12.3 is affected
  • Version 2023.12.4 is affected
  • Version 2023.12.5 is affected
  • Version 2023.12.6 is affected
  • Version 2023.12.7 is affected
  • Version 2023.12.8 is affected
  • Version 2023.12.9 is affected
  • Version 2023.12.10 is affected
  • Version 2023.12.11 is affected
  • Version 2023.12.12 is affected
  • Version 2023.12.13 is affected
  • Version 2023.12.14 is affected
  • Version 2023.12.15 is affected
  • Version 2023.12.16 is affected
  • Version 2023.12.17 is affected
  • Version 2023.12.18 is affected
  • Version 2023.12.19 is affected
  • Version 2023.12.20 is affected
  • Version 2023.12.21 is affected
  • Version 2023.12.22 is affected
  • Version 2023.12.23 is affected
  • Version 2023.12.24 is affected
  • Version 2023.12.25 is affected
  • Version 2023.12.26 is affected

Credits

  • GalaxynX (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Authorization Bypass CWE
  • Improper Authorization CWE