Trudesk
CVEs (11)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-45785 | Med | 0.42 | 6.5 | 0.00 | Jun 24, 2024 | TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would allow an attacker to restart the server, causing a DoS attack. The attacker must craft a webpage that would perform a GET request to the /api/v1/admin/restart… | ||
| CVE-2022-1719 | Med | 0.00 | 5.4 | 0.01 | Sep 29, 2022 | Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page | ||
| CVE-2022-2023 | Cri | 0.00 | 9.8 | 0.03 | Jun 20, 2022 | Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4. | ||
| CVE-2022-1947 | Med | 0.00 | 6.5 | 0.01 | May 31, 2022 | Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3. | ||
| CVE-2022-1926 | Med | 0.00 | 4.9 | 0.01 | May 31, 2022 | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. | ||
| CVE-2022-1931 | Hig | 0.00 | 8.1 | 0.02 | May 31, 2022 | Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3. | ||
| CVE-2022-1752 | Hig | 0.00 | 8.0 | 0.02 | May 21, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2. | ||
| CVE-2022-1775 | Cri | 0.00 | 9.8 | 0.02 | May 20, 2022 | Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2. | ||
| CVE-2022-1754 | Med | 0.00 | 6.5 | 0.01 | May 20, 2022 | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2. | ||
| CVE-2022-1044 | Med | 0.00 | 6.5 | 0.01 | May 12, 2022 | Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1. | ||
| CVE-2022-1290 | Med | 0.00 | 5.4 | 0.02 | Apr 10, 2022 | Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse. |
- risk 0.42cvss 6.5epss 0.00
TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would allow an attacker to restart the server, causing a DoS attack. The attacker must craft a webpage that would perform a GET request to the /api/v1/admin/restart…
- risk 0.00cvss 5.4epss 0.01
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page
- risk 0.00cvss 9.8epss 0.03
Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4.
- risk 0.00cvss 6.5epss 0.01
Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.
- risk 0.00cvss 4.9epss 0.01
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3.
- risk 0.00cvss 8.1epss 0.02
Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3.
- risk 0.00cvss 8.0epss 0.02
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.
- risk 0.00cvss 9.8epss 0.02
Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2.
- risk 0.00cvss 6.5epss 0.01
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2.
- risk 0.00cvss 6.5epss 0.01
Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.
- risk 0.00cvss 5.4epss 0.02
Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.