111 matches found
CVE-2022-1931 Incorrect Synchronization in polonel/trudesk
Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3...
CVE-2022-1931
The CVE-2022-1931 entry concerns polonel/trudesk with an incorrect synchronization issue in versions prior to 1.2.3. The core problem is a synchronization flaw in the code path, as stated in multiple sources. According to the NVD entry, the vulnerability has a CVSS-3.1 base score of 8.1 (HIGH) wi...
PT-2022-14174 · Unknown · Polonel/Trudesk
Name of the Vulnerable Software and Affected Versions: polonel/trudesk versions prior to 1.2.3 Description: The issue concerns the exposure of sensitive information to unauthorized actors due to improper removal of sensitive information before storage or transfer. This affects the GitHub reposito...
CVE-2022-1752
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1752 Unrestricted Upload of File with Dangerous Type in polonel/trudesk
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1752
Polonel/trudesk CVE-2022-1752 is an Unrestricted File Upload vulnerability in versions prior to 1.2.2. Connected sources describe a path-traversal/unsafe upload path in the uploadImage workflow that can allow uploading dangerous files to arbitrary server locations. The CVE notes an unrestricted u...
CVE-2022-1775
Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1775
Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1775 Weak Password Requirements in polonel/trudesk
Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1775
The CVE-2022-1775 entry concerns weak password requirements in polonel/trudesk before version 1.2.2. The vulnerability affects the authentication process, enabling weaker passwords and increasing the risk of account compromise. Public documents note the issue but do not detail exploit vectors or ...
CVE-2022-1775 Weak Password Requirements in polonel/trudesk
Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1803
Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1803
Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...
Input validation
Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1803
CVE-2022-1803 affects the GitHub repository polonel/trudesk prior to 1.2.2, where an improper restriction of rendered UI layers or frames enables UI redressing. The root cause is inadequate control of embedded UI layers/frames, potentially allowing aEB (UI-layer) to be framed by other content. Do...
CVE-2022-1803 Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk
Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1803 Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk
Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...