Known Vulnerabilities for products from Trudesk Project
Listed below are 19 of the newest known vulnerabilities associated with the vendor "Trudesk Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-26982 json | Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under t... | 5.4 - MEDIUM | 2023-03-29 | 2023-04-01 |
| CVE-2022-2128 json | Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4. | 9.8 - CRITICAL | 2022-06-20 | 2022-06-28 |
| CVE-2022-2023 json | Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4. | 9.8 - CRITICAL | 2022-06-20 | 2023-06-27 |
| CVE-2022-1947 json | Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3. | 6.5 - MEDIUM | 2022-05-31 | 2022-06-14 |
| CVE-2022-1931 json | Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3. | 8.1 - HIGH | 2022-05-31 | 2022-06-08 |
| CVE-2022-1926 json | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. | 4.9 - MEDIUM | 2022-05-31 | 2022-06-08 |
| CVE-2022-1893 json | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3. | 5.3 - MEDIUM | 2022-05-31 | 2023-08-02 |
| CVE-2022-1808 json | Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3. | 8.8 - HIGH | 2022-05-31 | 2022-06-10 |
| CVE-2022-1803 json | Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2. | 6.9 - MEDIUM | 2022-05-20 | 2022-06-01 |
| CVE-2022-1775 json | Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2. | 9.8 - CRITICAL | 2022-05-20 | 2022-06-02 |
| CVE-2022-1770 json | Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2. | 8.8 - HIGH | 2022-05-20 | 2022-05-26 |
| CVE-2022-1754 json | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2. | 6.5 - MEDIUM | 2022-05-20 | 2022-05-26 |
| CVE-2022-1752 json | Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2. | 8 - HIGH | 2022-05-21 | 2022-05-26 |
| CVE-2022-1728 json | Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. Thi... | 6.5 - MEDIUM | 2022-05-16 | 2022-05-25 |
| CVE-2022-1719 json | Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of... | 5.4 - MEDIUM | 2022-09-29 | 2022-09-30 |
| CVE-2022-1718 json | The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow ... | 7.5 - HIGH | 2022-09-29 | 2022-09-30 |
| CVE-2022-1290 json | Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to e... | 5.4 - MEDIUM | 2022-04-10 | 2023-03-07 |
| CVE-2022-1045 json | Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0. | 5.4 - MEDIUM | 2022-04-11 | 2022-04-15 |
| CVE-2022-1044 json | Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1. | 6.5 - MEDIUM | 2022-05-12 | 2022-05-20 |