Lucene search
Vishalvishw102F65AF7C-A74B-46A6-8847-5DB6785F1CF2HistoryMay 16, 2022 - 7:24 p.m.
The trudesk application allows large characters to insert in the input field "Name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in polonel / trudesk
2022-05-1619:24:04
vishalvishw10
www.huntr.dev
18
0.001 Low
EPSS
Percentile
32.1%
Proof of Concept
1 - Go to Profile or https://docker.trudesk.io/profile
2 - and fill name input field with huge characters
Payload :- https://drive.google.com/file/d/17-SH8ZaTqBTQGugpbh2SQtTKnJOL9NIK/view?usp=sharing
Video POC :- https://drive.google.com/file/d/1LYSRwVl6hAS_1Q1cYJNYkBgH8YNEBk_Y/view?usp=sharing
Screenshot of POC -: https://drive.google.com/file/d/1jKOLbBVq2SOD20bCvvXirOf-5mtsvaEC/view?usp=sharing
Related
cve
cve
CVE-2022-1754
2022-05-20 07:15:09
prion
prion
Integer overflow
2022-05-20 07:15:00
osv
osv
CVE-2022-1754
2022-05-20 07:15:09
nvd
nvd
CVE-2022-1754
2022-05-20 07:15:09
cvelist
cvelist
CVE-2022-1754 Integer Overflow or Wraparound in polonel/trudesk
2022-05-20 07:05:10