CVE-2026-102373
GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can enumerate sequential comment IDs to read private comments from other users' tickets without proper authorization checks.
| CWE | CWE-639 |
| Vendor | gestsup |
| Product | gestsup |
| Published | Sep 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for gestsup gestsup
Be the first to know when new medium vulnerabilities affecting gestsup gestsup are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
GestSup / GestSup
0 < 3.2.62
References
gestsup.fr: https://gestsup.fr/index.php?page=changelog gestsup.fr: https://gestsup.fr/index.php?page=download gestsup.fr: https://gestsup.fr/index.php?page=download&channel=stable&version=3.2.62&type=patch vulncheck.com: https://www.vulncheck.com/advisories/gestsup-before-3.2.62-private-ticket-comment-disclosure-via-threadedit-parameter
Credits
SpiizN