Lucene search
Akshayravic09yc471FF8AFE4-6FF7-45AA-A652-D8AAC7E5BE7EHistoryMay 14, 2022 - 1:35 p.m.
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request
2022-05-1413:35:20
akshayravic09yc47
www.huntr.dev
26
0.003 Low
EPSS
Percentile
65.3%
POC:
- go to signup form:
http://127.0.0.1:8118/signup - Fill the Full Name input field with huge characters(more than lakhs or crores)
- After created the account, check the admin panel:
http://127.0.0.1:8118/accounts, go to Accounts –> customers - The admin panel will be flooded with our payload
POC Screenshot:
https://ibb.co/2Nvj908
POC video:
https://www.mediafire.com/file/vng5aufoydb6hl5/trudesk-poc.mov/file
Related
osv
osv
CVE-2022-1718
2022-09-29 03:15:15
nvd
nvd
CVE-2022-1718
2022-09-29 03:15:15
cvelist
cvelist
cve
cve
CVE-2022-1718
2022-09-29 03:15:15
prion
prion
Cross site request forgery (csrf)
2022-09-29 03:15:00