Vulnerabilities

TI-2022-01594 CVE-2022-1728 · GHSA-3pvh-8v83-x7v2

Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk

LOW 31

Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0097 Published 2022-05-16 Fixed in 1.2.2 CWE-190

TI-2022-01584 CVE-2022-1718 · GHSA-733x-qm55-w9g4

Integer overflow in polonel/trudesk

LOW 35

The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository po…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01053 Published 2022-05-16 Fixed in 1.2.2 CWE-190

TI-2022-01585 CVE-2022-1719 · GHSA-9g28-m7m5-fqf2

Reflected XSS on ticket filter function in polonel/trudesk

LOW 26

Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00735 Published 2022-05-16 Fixed in 1.2.2 CWE-79

Vulnerabilities

Filters

Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk

Integer overflow in polonel/trudesk

Reflected XSS on ticket filter function in polonel/trudesk