Vulnerabilities

TI-2022-01641 CVE-2022-1775 · GHSA-rg6r-9xcf-7ppm

Weak Password Requirements in polonel/trudesk

MEDIUM 46

Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02238 Published 2022-05-20 Fixed in 1.2.2 CWE-521

TI-2022-01669 CVE-2022-1803 · GHSA-wvhx-f4v3-x2m8

LOW 34

Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.0163 Published 2022-05-20 Fixed in 1.2.2 CWE-1021

TI-2022-01636 CVE-2022-1770 · GHSA-rrw6-f33h-795h

MEDIUM 43

Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02556 Published 2022-05-20 Fixed in 1.2.2 CWE-269

TI-2022-01620 CVE-2022-1754 · GHSA-rm9j-4357-597x

LOW 31

Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01044 Published 2022-05-20 Fixed in 1.2.2 CWE-190