Known Vulnerabilities for products from Trudesk Project
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Trudesk Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114402 json | Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImage tha... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-114401 json | Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to enumera... | Not Provided | 2026-10-21 | 2026-10-29 |
| CVE-2026-114399 json | Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supply... | Not Provided | 2026-10-21 | 2026-10-29 |
| CVE-2026-114398 json | Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or... | Not Provided | 2026-10-21 | 2026-10-29 |
| CVE-2026-114397 json | Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unset, le... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-114396 json | Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to inject co... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-114395 json | Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allows authenticated users to ... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-114394 json | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content attribu... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-114393 json | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify tickets ou... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-114392 json | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2023-26982 json | Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under t... | 5.4 - MEDIUM | 2023-03-29 | 2023-04-01 |
| CVE-2022-2128 json | Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4. | 9.8 - CRITICAL | 2022-06-20 | 2022-06-28 |
| CVE-2022-2023 json | Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4. | 9.8 - CRITICAL | 2022-06-20 | 2023-06-27 |
| CVE-2022-1947 json | Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3. | 6.5 - MEDIUM | 2022-05-31 | 2022-06-14 |
| CVE-2022-1931 json | Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3. | 8.1 - HIGH | 2022-05-31 | 2022-06-08 |
| CVE-2022-1926 json | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. | 4.9 - MEDIUM | 2022-05-31 | 2022-06-08 |
| CVE-2022-1893 json | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3. | 5.3 - MEDIUM | 2022-05-31 | 2023-08-02 |
| CVE-2022-1808 json | Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3. | 8.8 - HIGH | 2022-05-31 | 2022-06-10 |
| CVE-2022-1803 json | Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2. | 6.9 - MEDIUM | 2022-05-20 | 2022-06-01 |
| CVE-2022-1775 json | Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2. | 9.8 - CRITICAL | 2022-05-20 | 2022-06-02 |