Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-04-29 17:43 UTC
  • Importiert: 2026-05-17 21:16 UTC
  • Quelle-ID: full_disc
  • uid_hash: f309550f75f03ab4bc12d269c2b2b42f162dc71422109be34246309678fc75da

Inhalt

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 29 Update 2026-04-28: The vendor contacted us and now provides a patched version v1.3.674 which can be obtained at the

following URL:

https://desktime.com/download

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

threat_intel - de https://seclists.org/rss/fulldisclosure.rss