178 matches found
CVE-2022-1728
CVE-2022-1728 affects trudesk (polonel/trudesk) prior to 1.2.2. The root cause is lack of validation for password length, enabling an attacker to cause a denial of service by submitting a very long password. Impact described in connected documents is a DoS where genuine users cannot access resour...
CVE-2022-1718 The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
CVE-2022-1718
CVE-2022-1718 affects Trudesk prior to 1.2.2, where the Full Name field on signup accepts unusually large characters, enabling DoS via crafted HTTP requests. Affected: polonel/trudesk (pre-1.2.2). Impact: Denial of Service with HIGH overall severity (NVD CVSS v3.1 base 7.5; local/remote factors v...
CVE-2022-1718 The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
CVE-2022-1719 Reflected XSS on ticket filter function in polonel/trudesk
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page...
CVE-2022-1719
CVE-2022-1719: Reflected XSS in Trudesk (polonel/trudesk) prior to 1.2.2. The ticket filter function accepts input that can execute arbitrary JavaScript in the web page. Affected: Trudesk versions before 1.2.2. Root cause: reflected XSS in the ticket filter attribute handling. Impact: can lead to...
CVE-2022-1719 Reflected XSS on ticket filter function in polonel/trudesk
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page...
Trudesk 输入验证错误漏洞
trudesk is an open source helpdesk/ticketing solution. A denial of service vulnerability exists in trudesk versions prior to 1.2.2, which stems from a lack of validation for password length and can be exploited by an attacker to cause a denial of service via a long password...
PT-2022-14070 · Trudesk · Trudesk
Name of the Vulnerable Software and Affected Versions: trudesk versions prior to 1.2.2 Description: The trudesk application has an issue where large characters can be inserted into the Full Name input field on the signup page, allowing attackers to cause a Denial of Service DoS via a crafted HTTP...
PT-2022-14071 · Trudesk · Trudesk
Name of the Vulnerable Software and Affected Versions: trudesk versions prior to 1.2.2 Description: The issue is related to a Reflected XSS in the ticket filter function, which can execute malicious javascript code in a web page. Recommendations: For versions prior to 1.2.2, update to version 1.2...
Allowing long password leads to denial of service in polonel/trudesk
Description The trudesk application allows to sending a very long password 10000000 characters it's possible to cause a denial of service attack on the server. This may lead to the website becoming unavailable or unresponsive. Usually, this problem is caused by a vulnerable password hashing...
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request
POC: 1. go to signup form: http://127.0.0.1:8118/signup 2. Fill the Full Name input field with huge charactersmore than lakhs or crores 3. After created the account, check the admin panel: http://127.0.0.1:8118/accounts, go to Accounts -- customers 4. The admin panel will be flooded with our...
CVE-2022-1044
Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1...
CVE-2022-1044 Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk
Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1...
CVE-2022-1044 Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk
Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1...
Chris Brame Trudesk 安全漏洞
Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Chris Brame Trudesk 1.2.1, which stems from insecure storage of profile images, leading to the disclosure of sensitive data...
Reflected XSS on ticket filter function
Description Ticket management filter in Trudesk v1.2.0 allow user to perform XSS due to improper validation on filter attribute such as "status", "ticket type", "assignee" and etc. Proof of Concept 1 Login to Trudesk with role user privilege 2 Tickets - Filter ticket 3 Filter for ticket status po...
CVE-2022-1045
Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...
