CVE-2026-102373
GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter
GestSup GestSup
CVSS
7.1HighExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 1 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.24%Chance of exploitation activity in the next 30 days, higher than 14% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 3.2.62GestSupCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can enumerate sequential comment IDs to read private comments from other users' tickets without proper authorization checks.
Text from CVE List
Affected versions 1
- GestSupaffected: all versions before 3.2.62CVE List
References 5
- gestsup.fr/index.php?page=changelogFixvia CVE List
- gestsup.fr/index.php?page=download&channel=stable&version=3.2.62&type=patchFixvia CVE List
- vulncheck.com/advisories/gestsup-before-3.2.62-private-ticket-comment-disclosure-via-threadedit-parameterAdvisoryvia CVE List
- blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/Exploitvia CVE List
- gestsup.fr/index.php?page=downloadReferencevia CVE List