SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-04-29 17:43 UTC
Importiert: 2026-05-17 21:16 UTC
Quelle-ID: full_disc
uid_hash: ae6e840061bb165c435ccdf05fc097c00c4b088d803ccaa7ce95e1bb4d37e9ff

Full Disclosure

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 29 SEC Consult Vulnerability Lab Security Advisory < 20260427-0 >

=======================================================================

           title: Missing TLS Certificate Validation leading to RCE

         product: DeskTime Time Tracking App

vulnerable version: 1.3.671

   fixed version: -

      CVE number: CVE-2025-10539

impact: medium

        homepage:https://desktime.com...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2025-10539

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss