176 matches found
CVE-2023-26982
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
Cross site scripting
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
CVE-2023-26982
CVE-2023-26982 concerns Trudesk v1.2.6, which contains a stored cross-site scripting (XSS) vulnerability in the Create Ticket function, exploitable via the Add Tags parameter. Root cause: unsanitized input in Add Tags leads to script execution within affected user sessions. Impact: can enable mal...
CVE-2023-26982
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
Chris Brame Trudesk 跨站脚本漏洞
Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame, USA. A security vulnerability exists in Trudesk version 1.2.6, which stems from the discovery of a stored cross-site scripting XSS vulnerability via the Add Tags parameter...
PT-2023-20887 · Trudesk · Trudesk
Name of the Vulnerable Software and Affected Versions: Trudesk version 1.2.6 Description: The issue is a stored cross-site scripting XSS vulnerability. It occurs via the Add Tags parameter under the Create Ticket function. This allows for potential malicious script execution when a user interacts...
CVE-2023-26982
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
CVE-2023-26982
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
CVE-2022-1718
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
CVE-2022-1718
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
CVE-2022-1719
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page...
CVE-2022-1719
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page...
Cross site request forgery (csrf)
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
Trudesk 跨站脚本漏洞
Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A cross-site scripting vulnerability exists in Trudesk versions prior to 1.2.2, which stems from reflected XSS on the ticket filtering functionality, which is capable of executing malicious javascript code in ...
Trudesk 输入验证错误漏洞
Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame, USA. An input validation error vulnerability exists in versions prior to Trudesk 1.2.2 that stems from allowing large characters to be inserted into the full name of the input field of a registration field, which...
CVE-2022-2128
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4...
CVE-2022-2128 Unrestricted Upload of File with Dangerous Type in polonel/trudesk
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4...
CVE-2022-2128
CVE-2022-2128 affects polonel/trudesk prior to 1.2.4 and is described as Unrestricted Upload of File with Dangerous Type. The vulnerability is in the GitHub repository and relates to uploading files with dangerous types, with CVSS indicating high severity (base scores up to 9.8 in NVD) and networ...