Duplicate-of-CVE-2023-26982

Trudesk version 1.2.6 Vulnerability Explanation: Trudesk version 1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the tickets Create/Modify Ticket Tags on admin role. Attack Vectors: The attacker must go to Settings menu, select tickets and then scroll down to...

CVE-2023-26982

CVE-2023-26982 Vulnerability Explanation: Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function. Attack Vectors: The attacker must create some ticket and then edit tags in the ticket and insert the XSS...

EUVD-2022-34414

Malicious code in bioql PyPI...

EUVD-2022-25035

Malicious code in bioql PyPI...

EUVD-2022-25198

Malicious code in bioql PyPI...

EUVD-2022-25000

Malicious code in bioql PyPI...

EUVD-2022-24392

Malicious code in bioql PyPI...

EUVD-2022-25033

Malicious code in bioql PyPI...

EUVD-2022-25200

Malicious code in bioql PyPI...

EUVD-2022-25087

Malicious code in bioql PyPI...

EUVD-2022-25009

Malicious code in bioql PyPI...

EUVD-2022-25056

Malicious code in bioql PyPI...

EUVD-2023-30772

Malicious code in bioql PyPI...

EUVD-2022-25082

Malicious code in bioql PyPI...

EUVD-2022-25001

Malicious code in bioql PyPI...

EUVD-2022-25051

Malicious code in bioql PyPI...

CVE-2023-26982

Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...

CVE-2022-1893

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3...

CVE-2022-1719

Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page...

CVE-2021-45785

TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery CSRF attack which would allow an attacker to restart the server, causing a DoS attack. The attacker must craft a webpage that would perform a GET request to the /api/v1/admin/restart endpoint, then the vict...