CVE-2021-45785

all versions

TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would allow an atta

6.5MEDIUM

CVE-2023-26982

all versions

Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Cr

5.4MEDIUM

CVE-2022-1719

< 1.2.2

Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of exec

5.4MEDIUM

CVE-2022-1718

< 1.2.2

The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attac

7.5HIGH

CVE-2022-2128

< 1.2.4

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4.

9.8CRITICAL

CVE-2022-2023

< 1.2.4

Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4.

9.8CRITICAL

CVE-2022-1947

< 1.2.3

Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.

6.5MEDIUM

CVE-2022-1893

< 1.2.3

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3.

4.6MEDIUM

CVE-2022-1808

< 1.2.3

Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3.

8.8HIGH

CVE-2022-1926

< 1.2.3

Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3.

4.9MEDIUM

CVE-2022-1931

< 1.2.3

Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3.

8.1HIGH

CVE-2022-1752

< 1.2.2

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.

8.0HIGH

CVE-2022-1775

< 1.2.2

Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2.

9.8CRITICAL

CVE-2022-1803

< 1.2.2

Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2.

6.9MEDIUM

CVE-2022-1770

< 1.2.2

Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2.

8.8HIGH

CVE-2022-1754

< 1.2.2

Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2.

6.5MEDIUM

CVE-2022-1728

< 1.2.2

Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vul

6.5MEDIUM

CVE-2022-1044

< 1.2.1

Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.

6.5MEDIUM

CVE-2022-1045

< 1.2.0

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.

5.4MEDIUM

CVE-2022-1290

< 1.2.0

Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execut

5.4MEDIUM